IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 217.216.173.15 ip

Score
100
/100
raw: 1207.09
Reports
124
Last Reported
2026-11-08 19:35 UTC
Categories
Config Exposure Probe (108) Web Stack Probe (6) Scanning (4) Admin Panel Probe (3) API Probe (3)

Network details

ASN
399486
Organization
12651980 CANADA INC.
Country
US

Threat Intelligence enriched 2026-11-08 18:58 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-08 19:34 UTC dot-env direct GET /.env
2026-11-08 19:33 UTC dot-env direct GET /.env
2026-11-08 19:33 UTC dot-env direct GET /.env
2026-11-08 19:29 UTC catch-all-config direct GET /[host]/.env
2026-11-08 19:29 UTC catch-all-config direct GET /database/.env
2026-11-08 19:29 UTC catch-all-config direct GET /conf/.env
2026-11-08 19:29 UTC api direct GET /api/.env
2026-11-08 19:29 UTC catch-all-config direct GET /app/config/.env
2026-11-08 19:29 UTC dot-env direct GET /.env
2026-11-08 19:29 UTC catch-all-config direct GET /audio/.env
2026-11-08 19:28 UTC catch-all-config direct GET /crm/.env
2026-11-08 19:28 UTC catch-all-config direct GET /local/.env burst
2026-11-08 19:28 UTC catch-all-config direct GET /old/.env burst
2026-11-08 19:28 UTC catch-all-config direct GET /new/.env burst
2026-11-08 19:28 UTC catch-all-config direct GET /library/.env burst
2026-11-08 19:28 UTC wp-admin direct GET /wp-admin/.env burst
2026-11-08 19:28 UTC wp-content direct GET /wp-content/.env burst
2026-11-08 19:28 UTC catch-all-config direct GET /apps/.env burst
2026-11-08 19:28 UTC catch-all-config direct GET /cgi-bin/.env burst
2026-11-08 19:27 UTC catch-all-config direct GET /src/.env burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
46.200.59.117 ip
50
1 UA 2026-11-08 19:38 UTC 2026-11-08 19:38 UTC
187.246.133.145 ip
50
1 MX 2026-11-08 19:38 UTC 2026-11-08 19:38 UTC
177.126.10.143 ip
39
1 BR 2026-11-08 19:38 UTC 2026-11-08 19:38 UTC
95.110.35.47 ip
39
1 RU 2026-11-08 19:37 UTC 2026-11-08 19:37 UTC
88.135.212.69 ip
50
1 UA 2026-11-08 19:36 UTC 2026-11-08 19:36 UTC
62.61.167.50 ip
39
1 OM 2026-11-08 19:34 UTC 2026-11-08 19:34 UTC
84.233.199.147 ip
100
146 US 2026-11-08 19:38 UTC 2026-11-08 19:34 UTC
81.177.74.5 ip
50
1 RU 2026-11-08 19:33 UTC 2026-11-08 19:33 UTC
31.41.67.7 ip
50
1 UA 2026-11-08 19:33 UTC 2026-11-08 19:33 UTC
103.174.19.130 ip
50
1 ID 2026-11-08 19:33 UTC 2026-11-08 19:33 UTC
170.244.210.245 ip
50
1 EC 2026-11-08 19:32 UTC 2026-11-08 19:32 UTC
136.23.86.164 ip
100
23 US 2026-11-08 19:34 UTC 2026-11-08 19:31 UTC
196.117.133.35 ip
39
1 MA 2026-11-08 19:31 UTC 2026-11-08 19:31 UTC
34.174.179.89 ip
99
5 US 2026-11-08 19:31 UTC 2026-11-08 19:30 UTC
109.245.73.66 ip
39
1 RS 2026-11-08 19:30 UTC 2026-11-08 19:30 UTC
165.245.242.242 ip
18
1 DE 2026-11-08 19:28 UTC 2026-11-08 19:28 UTC
64.227.112.28 ip
80
6 DE 2026-11-08 19:28 UTC 2026-11-08 19:28 UTC
181.160.124.206 ip
50
1 CL 2026-11-08 19:28 UTC 2026-11-08 19:28 UTC
105.157.39.170 ip
39
1 MA 2026-11-08 19:28 UTC 2026-11-08 19:28 UTC
181.29.123.110 ip
50
1 AR 2026-11-08 19:28 UTC 2026-11-08 19:28 UTC
177.181.1.174 ip
39
1 BR 2026-11-08 19:27 UTC 2026-11-08 19:27 UTC
181.20.94.68 ip
50
1 AR 2026-11-08 19:26 UTC 2026-11-08 19:26 UTC
40.114.36.50 ip
80
4 US 2026-11-08 19:26 UTC 2026-11-08 19:25 UTC
161.142.124.179 ip
39
1 MY 2026-11-08 19:25 UTC 2026-11-08 19:25 UTC
186.251.81.69 ip
50
1 BR 2026-11-08 19:25 UTC 2026-11-08 19:25 UTC

Showing 1-25 of 89149 indicators