IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 217.154.106.221 ip
Score
4
/100
raw: 0.45
Reports
20
Last Reported
2026-07-28 05:48 UTC
Categories
Web Stack Probe (11)
API Probe (5)
Scanning (4)
Network details
ASN
8560
Organization
IONOS SE
Country
ES
Threat Intelligence enriched 2026-11-04 23:08 UTC
Reverse DNS
ip217.154.106-221.pbiaas.com
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-28 05:47 UTC | xmlrpc | direct | POST | /xmlrpc.php | |
| 2026-07-28 03:31 UTC | wp-json | direct | GET | /wp-json/oembed/1.0/embed | |
| 2026-07-28 02:46 UTC | catch-all-cms | direct | GET | /wp-sitemap-users-1.xml | |
| 2026-07-28 02:04 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-07-28 01:59 UTC | catch-all-cms | direct | GET | /wp/wp-json/wp/v2/users | |
| 2026-07-27 22:34 UTC | catch-all-script | direct | GET | /index.php | |
| 2026-07-27 21:23 UTC | api | direct | POST | /api/graphql | |
| 2026-07-27 18:53 UTC | xmlrpc | direct | POST | /xmlrpc.php | |
| 2026-07-27 18:28 UTC | catch-all-suspicious | direct | GET | /author-sitemap.xml | |
| 2026-07-27 13:05 UTC | graphql | direct | POST | /graphql |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 212.164.178.237 | ip |
50
|
1 | RU | 2026-11-11 06:06 UTC | 2026-11-11 06:06 UTC |
| 176.115.149.225 | ip |
39
|
1 | RU | 2026-11-11 06:05 UTC | 2026-11-11 06:05 UTC |
| 172.196.43.109 | ip |
99
|
10 | NZ | 2026-11-11 06:06 UTC | 2026-11-11 06:05 UTC |
| 109.126.248.235 | ip |
50
|
1 | RU | 2026-11-11 06:05 UTC | 2026-11-11 06:05 UTC |
| 45.239.32.216 | ip |
39
|
1 | AR | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 102.213.48.173 | ip |
50
|
1 | KE | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 187.207.66.136 | ip |
39
|
1 | MX | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 143.105.97.131 | ip |
50
|
1 | AR | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 38.52.147.60 | ip |
39
|
1 | ID | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 117.253.111.200 | ip |
39
|
1 | IN | 2026-11-11 06:03 UTC | 2026-11-11 06:03 UTC |
| 171.25.212.162 | ip |
50
|
1 | RU | 2026-11-11 06:03 UTC | 2026-11-11 06:03 UTC |
| 46.36.123.45 | ip |
39
|
1 | AM | 2026-11-11 06:02 UTC | 2026-11-11 06:02 UTC |
| 213.135.155.0 | ip |
39
|
1 | RU | 2026-11-11 06:02 UTC | 2026-11-11 06:02 UTC |
| 89.23.211.53 | ip |
50
|
1 | RU | 2026-11-11 06:01 UTC | 2026-11-11 06:01 UTC |
| 186.130.79.26 | ip |
50
|
1 | AR | 2026-11-11 06:01 UTC | 2026-11-11 06:01 UTC |
| 152.56.164.155 | ip |
39
|
1 | IN | 2026-11-11 06:00 UTC | 2026-11-11 06:00 UTC |
| 185.252.220.147 | ip |
39
|
1 | RO | 2026-11-11 05:59 UTC | 2026-11-11 05:59 UTC |
| 91.233.121.216 | ip |
39
|
1 | DE | 2026-11-11 05:58 UTC | 2026-11-11 05:58 UTC |
| 103.145.74.139 | ip |
50
|
1 | BD | 2026-11-11 05:58 UTC | 2026-11-11 05:58 UTC |
| 49.205.47.89 | ip |
39
|
1 | IN | 2026-11-11 05:57 UTC | 2026-11-11 05:57 UTC |
| 103.190.40.249 | ip |
50
|
1 | NP | 2026-11-11 05:57 UTC | 2026-11-11 05:57 UTC |
| 112.205.222.221 | ip |
39
|
1 | PH | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
| 138.84.69.40 | ip |
50
|
1 | PH | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
| 190.213.178.169 | ip |
50
|
1 | TT | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
| 160.187.140.129 | ip |
39
|
1 | IN | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
Showing 1-25 of 92666 indicators