IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.206 ip
Score
79
/100
raw: 15.47
Reports
12
Last Reported
2026-11-03 22:08 UTC
Categories
Scanning (6)
Web Stack Probe (6)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 06:18 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-03 22:07 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-11-01 00:35 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-30 01:05 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-26 00:56 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-26 00:41 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-06 18:19 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-06 18:17 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-06 18:16 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-09-29 15:13 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-05-30 00:28 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-05-30 00:18 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-05-27 00:22 UTC | catch-all-suspicious | direct | GET | /webshell |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 187.190.238.158 | ip |
93
|
5 | MX | 2026-11-06 18:58 UTC | 2026-11-06 18:58 UTC |
| 187.189.215.143 | ip |
86
|
4 | MX | 2026-11-06 18:58 UTC | 2026-11-06 18:58 UTC |
| 63.143.93.97 | ip |
98
|
5 | JM | 2026-11-06 18:58 UTC | 2026-11-06 18:58 UTC |
| 196.189.154.185 | ip |
95
|
5 | ET | 2026-11-06 18:58 UTC | 2026-11-06 18:58 UTC |
| 113.211.208.106 | ip |
93
|
5 | MY | 2026-11-06 18:58 UTC | 2026-11-06 18:58 UTC |
| 172.68.195.166 | ip |
70
|
2 | DE | 2026-11-06 18:57 UTC | 2026-11-06 18:57 UTC |
| 51.81.169.203 | ip |
18
|
1 | US | 2026-11-06 18:57 UTC | 2026-11-06 18:57 UTC |
| 190.163.238.177 | ip |
100
|
21 | CL | 2026-11-06 18:57 UTC | 2026-11-06 18:55 UTC |
| 170.150.157.26 | ip |
100
|
20 | CL | 2026-11-06 18:57 UTC | 2026-11-06 18:55 UTC |
| 149.248.79.52 | ip |
75
|
4 | US | 2026-11-06 18:50 UTC | 2026-11-06 18:50 UTC |
| 99.228.243.187 | ip |
86
|
4 | CA | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 190.114.43.233 | ip |
39
|
1 | CL | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 5.248.126.201 | ip |
70
|
2 | UA | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 41.90.136.140 | ip |
39
|
1 | KE | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 37.139.39.83 | ip |
39
|
1 | RU | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 188.190.95.174 | ip |
39
|
1 | UA | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 187.243.192.19 | ip |
99
|
9 | MX | 2026-11-06 18:40 UTC | 2026-11-06 18:40 UTC |
| 185.2.184.61 | ip |
99
|
6 | RU | 2026-11-06 18:40 UTC | 2026-11-06 18:39 UTC |
| 103.226.195.99 | ip |
100
|
10 | ES | 2026-11-06 18:40 UTC | 2026-11-06 18:39 UTC |
| 141.98.11.8 | ip |
99
|
7 | LT | 2026-11-06 18:39 UTC | 2026-11-06 18:38 UTC |
| 94.73.24.138 | ip |
100
|
18 | PS | 2026-11-06 18:39 UTC | 2026-11-06 18:37 UTC |
| 194.32.153.69 | ip |
50
|
1 | BE | 2026-11-06 18:32 UTC | 2026-11-06 18:32 UTC |
| 102.214.117.54 | ip |
100
|
27 | ZA | 2026-11-06 18:28 UTC | 2026-11-06 18:24 UTC |
| 89.92.120.46 | ip |
100
|
30 | FR | 2026-11-06 18:28 UTC | 2026-11-06 18:24 UTC |
| 213.200.31.3 | ip |
100
|
29 | GE | 2026-11-06 18:28 UTC | 2026-11-06 18:24 UTC |
Showing 1-25 of 87549 indicators