IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 216.26.225.164 ip
Score
84
/100
raw: 18.62
Reports
62
Last Reported
2026-08-30 21:28 UTC
Categories
Config Exposure Probe (61)
Credential Stuffing (1)
Network details
ASN
200373
Organization
3xK Tech GmbH
Country
US
Threat Intelligence enriched 2026-11-04 15:07 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/index/refs/heads/development | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/index/refs/heads/production | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/index/refs/heads/staging | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/index/refs/heads/master | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/index/refs/heads/main | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/wtree/refs/heads/development | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/wtree/refs/heads/production | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/wtree/refs/heads/staging | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/wtree/refs/heads/master | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/wip/wtree/refs/heads/main | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/stash | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/remotes/origin/development | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/remotes/origin/production | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/remotes/origin/staging | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/remotes/origin/master | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/remotes/origin/main | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/remotes/origin/HEAD | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/heads/development | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/heads/production | burst |
| 2026-08-30 21:28 UTC | git-probe | direct | GET | /.git/refs/heads/staging | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 177.212.227.133 | ip |
39
|
1 | BR | 2026-11-09 02:38 UTC | 2026-11-09 02:38 UTC |
| 129.212.227.5 | ip |
45
|
3 | SG | 2026-11-09 02:38 UTC | 2026-11-09 02:38 UTC |
| 177.101.137.62 | ip |
50
|
1 | BR | 2026-11-09 02:35 UTC | 2026-11-09 02:35 UTC |
| 5.37.173.58 | ip |
50
|
1 | OM | 2026-11-09 02:35 UTC | 2026-11-09 02:35 UTC |
| 187.190.88.160 | ip |
39
|
1 | MX | 2026-11-09 02:34 UTC | 2026-11-09 02:34 UTC |
| 103.61.240.155 | ip |
39
|
1 | BD | 2026-11-09 02:34 UTC | 2026-11-09 02:34 UTC |
| 103.138.173.206 | ip |
50
|
1 | BD | 2026-11-09 02:33 UTC | 2026-11-09 02:33 UTC |
| 47.15.26.218 | ip |
39
|
1 | IN | 2026-11-09 02:32 UTC | 2026-11-09 02:32 UTC |
| 95.25.9.28 | ip |
39
|
1 | RU | 2026-11-09 02:32 UTC | 2026-11-09 02:32 UTC |
| 105.188.60.16 | ip |
50
|
1 | MA | 2026-11-09 02:32 UTC | 2026-11-09 02:32 UTC |
| 131.100.39.128 | ip |
39
|
1 | TT | 2026-11-09 02:31 UTC | 2026-11-09 02:31 UTC |
| 37.122.48.67 | ip |
50
|
1 | RU | 2026-11-09 02:31 UTC | 2026-11-09 02:31 UTC |
| 5.57.13.136 | ip |
50
|
1 | KG | 2026-11-09 02:27 UTC | 2026-11-09 02:27 UTC |
| 150.228.106.200 | ip |
39
|
1 | SY | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 91.188.171.196 | ip |
39
|
1 | RU | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 85.172.95.160 | ip |
50
|
1 | RU | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 181.26.95.92 | ip |
50
|
1 | AR | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 103.134.216.74 | ip |
39
|
1 | NP | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 213.24.125.162 | ip |
39
|
1 | RU | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 45.235.158.247 | ip |
50
|
1 | BR | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 202.188.206.63 | ip |
50
|
1 | MY | 2026-11-09 02:25 UTC | 2026-11-09 02:25 UTC |
| 103.239.105.197 | ip |
50
|
1 | MM | 2026-11-09 02:23 UTC | 2026-11-09 02:23 UTC |
| 181.189.103.161 | ip |
50
|
1 | BR | 2026-11-09 02:23 UTC | 2026-11-09 02:23 UTC |
| 122.183.49.46 | ip |
50
|
1 | IN | 2026-11-09 02:22 UTC | 2026-11-09 02:22 UTC |
| 38.210.96.49 | ip |
50
|
1 | CO | 2026-11-09 02:22 UTC | 2026-11-09 02:22 UTC |
Showing 1-25 of 89725 indicators