IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 90.251.222.214 ip
Score
99
/100
raw: 45.93
Reports
8
Last Reported
2026-11-12 19:26 UTC
Categories
Web Stack Probe (8)
Network details
ASN
5378
Organization
Vodafone Limited
Country
GB
Threat Intelligence enriched 2026-11-12 19:25 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 8 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-12 19:25 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | burst |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/ultimate-member/v1/users | burst |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/wemail/v1/subscribers | burst |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-12 19:24 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 181.21.130.201 | ip |
78
|
3 | AR | 2026-11-12 20:09 UTC | 2026-11-12 20:09 UTC |
| 98.97.134.39 | ip |
39
|
1 | AR | 2026-11-12 20:09 UTC | 2026-11-12 20:09 UTC |
| 2.56.189.185 | ip |
86
|
4 | US | 2026-11-12 20:09 UTC | 2026-11-12 20:09 UTC |
| 38.65.138.34 | ip |
100
|
8 | MX | 2026-11-12 20:09 UTC | 2026-11-12 20:08 UTC |
| 42.191.128.167 | ip |
100
|
8 | MY | 2026-11-12 20:09 UTC | 2026-11-12 20:08 UTC |
| 185.181.109.118 | ip |
100
|
8 | IQ | 2026-11-12 20:09 UTC | 2026-11-12 20:08 UTC |
| 172.68.195.240 | ip |
70
|
2 | DE | 2026-11-12 20:07 UTC | 2026-11-12 20:07 UTC |
| 94.249.164.182 | ip |
98
|
4 | DE | 2026-11-12 20:05 UTC | 2026-11-12 20:05 UTC |
| 31.134.15.115 | ip |
39
|
1 | SC | 2026-11-12 20:01 UTC | 2026-11-12 20:01 UTC |
| 185.68.155.225 | ip |
78
|
3 | RU | 2026-11-12 20:01 UTC | 2026-11-12 20:01 UTC |
| 68.183.165.14 | ip |
50
|
1 | US | 2026-11-12 20:01 UTC | 2026-11-12 20:01 UTC |
| 147.182.136.176 | ip |
50
|
1 | US | 2026-11-12 19:59 UTC | 2026-11-12 19:59 UTC |
| 102.213.134.86 | ip |
100
|
10 | ZA | 2026-11-12 19:48 UTC | 2026-11-12 19:47 UTC |
| 220.255.242.184 | ip |
100
|
26 | SG | 2026-11-12 19:48 UTC | 2026-11-12 19:44 UTC |
| 90.251.222.214 | ip |
99
|
8 | GB | 2026-11-12 19:26 UTC | 2026-11-12 19:25 UTC |
| 179.191.54.85 | ip |
39
|
1 | BR | 2026-11-12 19:24 UTC | 2026-11-12 19:24 UTC |
| 189.160.37.58 | ip |
39
|
1 | MX | 2026-11-12 19:24 UTC | 2026-11-12 19:24 UTC |
| 136.69.210.210 | ip |
100
|
82 | US | 2026-11-12 19:24 UTC | 2026-11-12 19:23 UTC |
| 41.56.178.201 | ip |
100
|
28 | ZA | 2026-11-12 19:27 UTC | 2026-11-12 19:23 UTC |
| 45.149.24.104 | ip |
100
|
23 | UA | 2026-11-12 19:24 UTC | 2026-11-12 19:20 UTC |
| 38.156.89.25 | ip |
100
|
24 | DO | 2026-11-12 19:26 UTC | 2026-11-12 19:20 UTC |
| 45.148.126.124 | ip |
50
|
1 | RU | 2026-11-12 19:19 UTC | 2026-11-12 19:19 UTC |
| 185.61.218.77 | ip |
50
|
1 | RU | 2026-11-12 19:19 UTC | 2026-11-12 19:19 UTC |
| 140.235.2.43 | ip |
50
|
1 | US | 2026-11-12 19:19 UTC | 2026-11-12 19:19 UTC |
| 178.73.114.113 | ip |
100
|
26 | SA | 2026-11-12 19:17 UTC | 2026-11-12 19:14 UTC |
Showing 1-25 of 97237 indicators