IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.200 ip
Score
73
/100
raw: 12.99
Reports
16
Last Reported
2026-11-01 01:01 UTC
Categories
Web Stack Probe (11)
Scanning (5)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 02:05 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-01 01:00 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-11-01 00:59 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-28 01:24 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-16 21:16 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-12 01:05 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-06 12:19 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-04 06:19 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-01 15:17 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-01 15:16 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-26 00:35 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-09-12 21:08 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-20 00:21 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-06-16 18:12 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-05-19 15:16 UTC | wp-login | direct | GET | /wp-login.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 37.65.167.80 | ip |
39
|
1 | FR | 2026-11-04 20:53 UTC | 2026-11-04 20:53 UTC |
| 168.144.164.224 | ip |
94
|
4 | US | 2026-11-04 20:51 UTC | 2026-11-04 20:51 UTC |
| 38.211.32.158 | ip |
39
|
1 | AR | 2026-11-04 20:43 UTC | 2026-11-04 20:43 UTC |
| 185.65.255.101 | ip |
39
|
1 | IQ | 2026-11-04 20:42 UTC | 2026-11-04 20:42 UTC |
| 45.136.26.202 | ip |
50
|
1 | US | 2026-11-04 20:41 UTC | 2026-11-04 20:41 UTC |
| 172.239.39.134 | ip |
99
|
6 | US | 2026-11-04 20:24 UTC | 2026-11-04 20:23 UTC |
| 200.50.159.55 | ip |
39
|
1 | PY | 2026-11-04 20:21 UTC | 2026-11-04 20:21 UTC |
| 176.146.78.23 | ip |
39
|
1 | FR | 2026-11-04 20:13 UTC | 2026-11-04 20:13 UTC |
| 2.90.98.131 | ip |
39
|
1 | SA | 2026-11-04 20:08 UTC | 2026-11-04 20:08 UTC |
| 158.173.77.33 | ip |
100
|
122 | IT | 2026-11-04 19:56 UTC | 2026-11-04 19:55 UTC |
| 190.109.123.110 | ip |
39
|
1 | EC | 2026-11-04 19:48 UTC | 2026-11-04 19:48 UTC |
| 170.150.23.83 | ip |
39
|
1 | BR | 2026-11-04 19:44 UTC | 2026-11-04 19:44 UTC |
| 179.191.44.38 | ip |
39
|
1 | BR | 2026-11-04 19:35 UTC | 2026-11-04 19:35 UTC |
| 45.144.52.239 | ip |
100
|
92 | FI | 2026-11-04 19:32 UTC | 2026-11-04 19:32 UTC |
| 20.65.170.194 | ip |
18
|
1 | US | 2026-11-04 19:30 UTC | 2026-11-04 19:30 UTC |
| 172.81.135.182 | ip |
55
|
1 | US | 2026-11-04 19:26 UTC | 2026-11-04 19:26 UTC |
| 52.248.43.16 | ip |
18
|
1 | US | 2026-11-04 19:26 UTC | 2026-11-04 19:26 UTC |
| 14.192.214.206 | ip |
39
|
1 | MY | 2026-11-04 19:17 UTC | 2026-11-04 19:17 UTC |
| 103.138.123.21 | ip |
39
|
1 | BD | 2026-11-04 19:15 UTC | 2026-11-04 19:15 UTC |
| 107.178.215.235 | ip |
100
|
24 | US | 2026-11-04 19:15 UTC | 2026-11-04 19:14 UTC |
| 34.150.111.203 | ip |
100
|
160 | HK | 2026-11-04 19:06 UTC | 2026-11-04 19:04 UTC |
| 91.225.4.22 | ip |
39
|
1 | UA | 2026-11-04 19:01 UTC | 2026-11-04 19:01 UTC |
| 164.92.181.190 | ip |
80
|
6 | DE | 2026-11-04 18:58 UTC | 2026-11-04 18:58 UTC |
| 198.54.114.5 | ip |
45
|
1 | US | 2026-11-04 18:55 UTC | 2026-11-04 18:55 UTC |
| 212.47.136.128 | ip |
39
|
1 | AZ | 2026-11-04 18:45 UTC | 2026-11-04 18:45 UTC |
Showing 1-25 of 86772 indicators