IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 217.138.216.146 ip

Score
100
/100
raw: 200.9
Reports
23
Last Reported
2026-11-15 15:59 UTC
Categories
Scanning (17) API Probe (4) Admin Panel Probe (2)

Network details

ASN
9009
Organization
M247 Europe SRL
Country
DE

Threat Intelligence enriched 2026-11-15 15:58 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-15 15:59 UTC catch-all-scan direct GET /1/summary burst
2026-11-15 15:59 UTC catch-all-script direct GET /submit.php burst
2026-11-15 15:58 UTC catch-all-scan direct GET /sign-in burst
2026-11-15 15:58 UTC catch-all-scan direct GET /panel/ burst
2026-11-15 15:58 UTC catch-all-scan direct GET /new/login burst
2026-11-15 15:58 UTC catch-all-scan direct GET /1/summary burst
2026-11-15 15:58 UTC api direct GET /api/v2/health burst
2026-11-15 15:58 UTC catch-all-script direct GET /submit.php burst
2026-11-15 15:58 UTC admin direct GET /admin/console/index.html burst
2026-11-15 15:58 UTC catch-all-scan direct GET /aaa9 burst
2026-11-15 15:58 UTC api direct GET /api/v1/stats burst
2026-11-15 15:58 UTC catch-all-scan direct GET /sign-in burst
2026-11-15 15:58 UTC catch-all-script direct GET /gate.php burst
2026-11-15 15:58 UTC catch-all-scan direct GET /panel/ burst
2026-11-15 15:58 UTC catch-all-scan direct GET /new/login burst
2026-11-15 15:58 UTC catch-all-script direct GET /webpanel/panel/login.php burst
2026-11-15 15:58 UTC api direct GET /api/v2/health burst
2026-11-15 15:58 UTC catch-all-scan direct GET /covenantuser/login burst
2026-11-15 15:58 UTC admin direct GET /admin/console/index.html burst
2026-11-15 15:58 UTC catch-all-scan direct GET /SayHello2Modlishka/ burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
94.180.237.38 ip
39
1 RU 2026-11-15 16:13 UTC 2026-11-15 16:13 UTC
181.128.19.130 ip
39
1 CO 2026-11-15 16:13 UTC 2026-11-15 16:13 UTC
178.122.218.140 ip
39
1 BY 2026-11-15 16:11 UTC 2026-11-15 16:11 UTC
102.67.255.25 ip
39
1 CI 2026-11-15 16:11 UTC 2026-11-15 16:11 UTC
212.195.65.85 ip
50
1 FR 2026-11-15 16:10 UTC 2026-11-15 16:10 UTC
42.191.36.223 ip
39
1 MY 2026-11-15 16:10 UTC 2026-11-15 16:10 UTC
106.205.152.48 ip
39
1 IN 2026-11-15 16:10 UTC 2026-11-15 16:10 UTC
102.128.129.82 ip
39
1 SO 2026-11-15 16:10 UTC 2026-11-15 16:10 UTC
46.191.155.36 ip
39
1 RU 2026-11-15 16:09 UTC 2026-11-15 16:09 UTC
102.213.24.15 ip
39
1 ZA 2026-11-15 16:09 UTC 2026-11-15 16:09 UTC
138.59.226.151 ip
39
1 PY 2026-11-15 16:09 UTC 2026-11-15 16:09 UTC
160.187.43.169 ip
50
1 IN 2026-11-15 16:07 UTC 2026-11-15 16:07 UTC
117.245.206.160 ip
50
1 IN 2026-11-15 16:06 UTC 2026-11-15 16:06 UTC
223.233.71.108 ip
50
1 IN 2026-11-15 16:05 UTC 2026-11-15 16:05 UTC
94.181.255.108 ip
39
1 RU 2026-11-15 16:03 UTC 2026-11-15 16:03 UTC
213.44.122.167 ip
39
1 FR 2026-11-15 16:02 UTC 2026-11-15 16:02 UTC
109.248.252.45 ip
88
3 RU 2026-11-15 16:01 UTC 2026-11-15 16:01 UTC
102.32.14.159 ip
39
1 ZA 2026-11-15 16:01 UTC 2026-11-15 16:01 UTC
103.26.239.24 ip
50
1 PK 2026-11-15 16:01 UTC 2026-11-15 16:01 UTC
45.5.243.53 ip
50
1 BR 2026-11-15 16:01 UTC 2026-11-15 16:01 UTC
201.177.167.216 ip
50
1 AR 2026-11-15 16:01 UTC 2026-11-15 16:01 UTC
144.172.98.45 ip
45
1 US 2026-11-15 16:00 UTC 2026-11-15 16:00 UTC
188.163.116.8 ip
39
1 UA 2026-11-15 16:00 UTC 2026-11-15 16:00 UTC
177.234.197.219 ip
50
1 EC 2026-11-15 16:00 UTC 2026-11-15 16:00 UTC
149.71.36.66 ip
50
1 PK 2026-11-15 15:59 UTC 2026-11-15 15:59 UTC

Showing 1-25 of 105360 indicators