IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 5.165.213.1 ip
Score
99
/100
raw: 44.88
Reports
7
Last Reported
2026-11-07 06:18 UTC
Categories
Web Stack Probe (7)
Network details
ASN
56981
Organization
JSC ER-Telecom Holding
Country
RU
Threat Intelligence enriched 2026-11-07 06:17 UTC
Reverse DNS
5x165x213x1.dynamic.tomsk.ertelecom.ru
DNSBL Status
Clean
Sensor Activity last 7 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-07 06:17 UTC | wp-json | direct | GET | /wp-json/ldlms/v2/users | burst |
| 2026-11-07 06:17 UTC | xmlrpc | direct | POST | /xmlrpc.php | burst |
| 2026-11-07 06:16 UTC | wp-json | direct | GET | /wp-json/webmention/1.0 | burst |
| 2026-11-07 06:16 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | |
| 2026-11-07 06:16 UTC | wp-json | direct | GET | /wp-json/wpml/tm/v1/languages | |
| 2026-11-07 06:16 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-11-07 06:16 UTC | wp-json | direct | GET | /wp-json/wc/v1/customers |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 34.64.70.221 | ip |
100
|
161 | KR | 2026-11-07 07:28 UTC | 2026-11-07 07:26 UTC |
| 167.172.54.97 | ip |
94
|
4 | GB | 2026-11-07 07:26 UTC | 2026-11-07 07:25 UTC |
| 209.97.173.90 | ip |
18
|
1 | SG | 2026-11-07 07:17 UTC | 2026-11-07 07:17 UTC |
| 130.94.40.220 | ip |
83
|
3 | SG | 2026-11-07 07:10 UTC | 2026-11-07 07:10 UTC |
| 158.173.77.93 | ip |
100
|
31 | IT | 2026-11-07 06:56 UTC | 2026-11-07 06:52 UTC |
| 187.152.207.202 | ip |
39
|
1 | MX | 2026-11-07 06:40 UTC | 2026-11-07 06:40 UTC |
| 181.24.135.165 | ip |
39
|
1 | AR | 2026-11-07 06:40 UTC | 2026-11-07 06:40 UTC |
| 193.233.122.33 | ip |
97
|
6 | RU | 2026-11-07 06:39 UTC | 2026-11-07 06:38 UTC |
| 181.119.89.164 | ip |
95
|
5 | CL | 2026-11-07 06:39 UTC | 2026-11-07 06:38 UTC |
| 101.255.137.177 | ip |
97
|
6 | ID | 2026-11-07 06:39 UTC | 2026-11-07 06:38 UTC |
| 157.48.73.172 | ip |
39
|
1 | IN | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 5.58.189.216 | ip |
93
|
4 | UA | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 9.165.91.49 | ip |
86
|
3 | SA | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 187.190.51.96 | ip |
86
|
4 | MX | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 39.53.193.178 | ip |
100
|
9 | PK | 2026-11-07 06:37 UTC | 2026-11-07 06:36 UTC |
| 217.25.82.74 | ip |
97
|
6 | UA | 2026-11-07 06:37 UTC | 2026-11-07 06:36 UTC |
| 201.189.54.50 | ip |
100
|
10 | CL | 2026-11-07 06:37 UTC | 2026-11-07 06:36 UTC |
| 203.76.250.130 | ip |
93
|
5 | IN | 2026-11-07 06:36 UTC | 2026-11-07 06:35 UTC |
| 201.251.104.198 | ip |
80
|
3 | AR | 2026-11-07 06:36 UTC | 2026-11-07 06:35 UTC |
| 175.143.59.154 | ip |
93
|
4 | MY | 2026-11-07 06:36 UTC | 2026-11-07 06:35 UTC |
| 104.152.52.104 | ip |
18
|
1 | US | 2026-11-07 06:24 UTC | 2026-11-07 06:24 UTC |
| 213.233.85.195 | ip |
70
|
2 | RO | 2026-11-07 06:26 UTC | 2026-11-07 06:22 UTC |
| 196.251.102.77 | ip |
100
|
29 | SC | 2026-11-07 06:20 UTC | 2026-11-07 06:18 UTC |
| 41.90.172.49 | ip |
39
|
1 | KE | 2026-11-07 06:18 UTC | 2026-11-07 06:18 UTC |
| 181.232.190.116 | ip |
39
|
1 | DO | 2026-11-07 06:18 UTC | 2026-11-07 06:18 UTC |
Showing 1-25 of 87862 indicators