IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.107 ip
Score
58
/100
raw: 8.76
Reports
13
Last Reported
2026-11-07 01:39 UTC
Categories
Web Stack Probe (8)
Scanning (5)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 22:15 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 13 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-07 01:38 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-11-04 02:13 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-31 01:20 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-10 21:38 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-09 09:43 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-09 09:42 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-05 06:17 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-05 00:31 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-09-04 13:20 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-04 09:09 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-08-31 00:16 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-07-25 12:11 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-23 12:10 UTC | wp-login | direct | GET | /wp-login.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 45.234.86.211 | ip |
39
|
1 | PY | 2026-11-11 05:25 UTC | 2026-11-11 05:25 UTC |
| 186.17.126.25 | ip |
39
|
1 | PY | 2026-11-11 05:25 UTC | 2026-11-11 05:25 UTC |
| 152.58.81.149 | ip |
50
|
1 | IN | 2026-11-11 05:23 UTC | 2026-11-11 05:23 UTC |
| 187.15.139.232 | ip |
50
|
1 | CA | 2026-11-11 05:23 UTC | 2026-11-11 05:23 UTC |
| 177.139.52.92 | ip |
50
|
1 | BR | 2026-11-11 05:23 UTC | 2026-11-11 05:23 UTC |
| 186.39.121.36 | ip |
50
|
1 | AR | 2026-11-11 05:23 UTC | 2026-11-11 05:23 UTC |
| 84.54.70.73 | ip |
39
|
1 | UZ | 2026-11-11 05:23 UTC | 2026-11-11 05:23 UTC |
| 45.233.26.98 | ip |
50
|
1 | BR | 2026-11-11 05:23 UTC | 2026-11-11 05:23 UTC |
| 84.54.72.76 | ip |
50
|
1 | UZ | 2026-11-11 05:22 UTC | 2026-11-11 05:22 UTC |
| 175.145.216.215 | ip |
39
|
1 | MY | 2026-11-11 05:22 UTC | 2026-11-11 05:22 UTC |
| 88.168.185.190 | ip |
39
|
1 | FR | 2026-11-11 05:22 UTC | 2026-11-11 05:22 UTC |
| 102.203.137.40 | ip |
39
|
1 | KE | 2026-11-11 05:22 UTC | 2026-11-11 05:22 UTC |
| 169.224.88.4 | ip |
50
|
1 | IQ | 2026-11-11 05:22 UTC | 2026-11-11 05:22 UTC |
| 79.139.162.8 | ip |
50
|
1 | RU | 2026-11-11 05:22 UTC | 2026-11-11 05:22 UTC |
| 182.77.67.84 | ip |
39
|
1 | IN | 2026-11-11 05:21 UTC | 2026-11-11 05:21 UTC |
| 190.97.245.55 | ip |
39
|
1 | VE | 2026-11-11 05:21 UTC | 2026-11-11 05:21 UTC |
| 59.178.50.218 | ip |
39
|
1 | IN | 2026-11-11 05:18 UTC | 2026-11-11 05:18 UTC |
| 165.0.101.206 | ip |
39
|
1 | ZA | 2026-11-11 05:18 UTC | 2026-11-11 05:18 UTC |
| 161.18.144.154 | ip |
39
|
1 | CO | 2026-11-11 05:18 UTC | 2026-11-11 05:18 UTC |
| 202.141.82.17 | ip |
39
|
1 | IN | 2026-11-11 05:18 UTC | 2026-11-11 05:18 UTC |
| 176.224.36.27 | ip |
39
|
1 | SA | 2026-11-11 05:18 UTC | 2026-11-11 05:18 UTC |
| 59.125.102.226 | ip |
50
|
1 | TW | 2026-11-11 05:17 UTC | 2026-11-11 05:17 UTC |
| 191.110.118.221 | ip |
50
|
1 | CO | 2026-11-11 05:17 UTC | 2026-11-11 05:17 UTC |
| 129.222.247.159 | ip |
39
|
1 | CA | 2026-11-11 05:17 UTC | 2026-11-11 05:17 UTC |
| 170.150.156.28 | ip |
50
|
1 | CL | 2026-11-11 05:17 UTC | 2026-11-11 05:17 UTC |
Showing 1-25 of 92571 indicators