Recently I’ve been fixing some performance issues due to the behaviour of some web bots. If you are concerned about 184.108.40.206, I’ll let you right away that this a legitimate Bingbot. Here’s an example from the HTTP access log:
220.127.116.11 - - [04/Sep/2019:21:53:15 -0700] "GET /library/file/mustangser532.exe-206653/ HTTP/1.1" 301 4303 "-" "Mozilla/5.0 (compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
18.104.22.168 is requesting content from Freefixer.com approximately every 10 seconds. Quite often, but that’s OK. I would like Freefixer.com to appear at bing.com.
So, how do I know that this in fact is a real Bingbot, and not some unwanted program that scrapes my web site? I’ll use the same procedure as recommended over at Bing Webmasters Tools. That is, a reverse IP lookup on the IP address, and then a forward IP lookup on the results from the reverse lookup. If you end up with the same IP that you started with, and the reverse lookup reports a search.msn.com, you can rest assured that you are dealing with a legitimate bingbot.
If you do an ARIN lookup on 22.214.171.124, you’ll see that Microsoft owns the range starting from 126.96.36.199 to 188.8.131.52. So I assume you can expect bingbots from all the IP addresses.