IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 198.235.24.127 ip

Score
89
/100
raw: 22.02
Reports
23
Last Reported
2026-11-03 00:29 UTC
Categories
Web Stack Probe (17) Scanning (6)

Network details

ASN
396982
Organization
Google LLC
Country
US

Threat Intelligence enriched 2026-11-04 12:15 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-03 00:29 UTC catch-all-script direct GET /shell.php
2026-11-01 06:27 UTC wp-json direct GET /wp-json/wp/v2/users
2026-11-01 06:27 UTC wp-json direct GET /wp-json/wp/v2/users
2026-10-28 01:33 UTC catch-all-suspicious direct GET /webshell
2026-10-16 00:13 UTC wp-login direct GET /wp-login.php
2026-10-16 00:11 UTC wp-json direct GET /wp-json/wp/v2/users
2026-10-15 22:04 UTC xmlrpc direct GET /xmlrpc.php
2026-10-10 21:32 UTC wp-json direct GET /wp-json/wp/v2/users
2026-10-10 08:20 UTC wp-json direct GET /wp-json/wp/v2/users
2026-10-10 08:20 UTC wp-json direct GET /wp-json/
2026-10-10 08:19 UTC wp-json direct GET /wp-json/
2026-09-26 21:13 UTC wp-json direct GET /wp-json/
2026-09-26 21:07 UTC wp-json direct GET /wp-json/wp/v2/users
2026-09-20 06:14 UTC wp-json direct GET /wp-json/wp/v2/users
2026-09-09 00:18 UTC wp-login direct GET /wp-login.php
2026-09-08 15:25 UTC wp-login direct GET /wp-login.php
2026-09-06 00:26 UTC catch-all-script direct GET /webshell.php
2026-09-06 00:20 UTC catch-all-suspicious direct GET /shell
2026-08-11 00:21 UTC wp-login direct GET /wp-login.php
2026-06-15 00:36 UTC catch-all-suspicious direct GET /shell

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
109.224.242.141 ip
39
 1 TR 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
190.92.107.253 ip
39
 1 AR 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
45.171.47.188 ip
50
 1 BR 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
138.36.34.220 ip
39
 1 BR 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
196.189.24.29 ip
50
 1 ET 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
109.248.193.8 ip
39
 1 RU 2026-11-08 15:48 UTC 2026-11-08 15:48 UTC
45.195.154.155 ip
39
 1 PH 2026-11-08 15:47 UTC 2026-11-08 15:47 UTC
122.183.42.130 ip
39
 1 IN 2026-11-08 15:47 UTC 2026-11-08 15:47 UTC
37.25.107.145 ip
39
 1 UA 2026-11-08 15:45 UTC 2026-11-08 15:45 UTC
196.189.190.1 ip
50
 1 ET 2026-11-08 15:43 UTC 2026-11-08 15:43 UTC
221.218.192.102 ip
39
 1 CN 2026-11-08 15:42 UTC 2026-11-08 15:42 UTC
41.250.178.115 ip
50
 1 MA 2026-11-08 15:42 UTC 2026-11-08 15:42 UTC
94.207.171.192 ip
50
 1 AE 2026-11-08 15:41 UTC 2026-11-08 15:41 UTC
105.68.135.50 ip
39
 1 MA 2026-11-08 15:39 UTC 2026-11-08 15:39 UTC
175.107.204.127 ip
50
 1 PK 2026-11-08 15:38 UTC 2026-11-08 15:38 UTC
176.108.85.162 ip
39
 1 KZ 2026-11-08 15:38 UTC 2026-11-08 15:38 UTC
183.13.75.163 ip
50
 1 CN 2026-11-08 15:38 UTC 2026-11-08 15:38 UTC
186.131.186.255 ip
50
 1 AR 2026-11-08 15:36 UTC 2026-11-08 15:36 UTC
95.25.58.199 ip
39
 1 RU 2026-11-08 15:35 UTC 2026-11-08 15:35 UTC
124.82.50.167 ip
50
 1 MY 2026-11-08 15:34 UTC 2026-11-08 15:34 UTC
37.40.228.4 ip
50
 1 OM 2026-11-08 15:34 UTC 2026-11-08 15:34 UTC
223.178.91.14 ip
50
 1 IN 2026-11-08 15:33 UTC 2026-11-08 15:33 UTC
24.200.142.19 ip
39
 1 CA 2026-11-08 15:32 UTC 2026-11-08 15:32 UTC
157.245.132.53 ip
94
 4 US 2026-11-08 15:31 UTC 2026-11-08 15:30 UTC
34.11.226.164 ip
100
 352 US 2026-11-08 15:49 UTC 2026-11-08 15:29 UTC

Showing 1-25 of 88830 indicators