IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.223 ip
Score
70
/100
raw: 12.06
Reports
14
Last Reported
2026-10-28 01:38 UTC
Categories
Scanning (8)
Web Stack Probe (6)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 01:07 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-10-28 01:38 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-27 09:41 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-12 16:24 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-12 12:05 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-12 00:27 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-12 00:26 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-10-12 00:24 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-09-30 18:18 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-09-26 12:14 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-19 00:24 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-09-09 00:30 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-09-09 00:26 UTC | catch-all-script | direct | GET | /webshell.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 137.184.143.97 | ip |
50
|
1 | US | 2026-11-04 06:46 UTC | 2026-11-04 06:46 UTC |
| 138.68.61.180 | ip |
55
|
2 | US | 2026-11-04 06:46 UTC | 2026-11-04 06:46 UTC |
| 45.79.218.40 | ip |
33
|
1 | US | 2026-11-04 06:46 UTC | 2026-11-04 06:46 UTC |
| 43.130.102.223 | ip |
39
|
1 | US | 2026-11-04 06:40 UTC | 2026-11-04 06:40 UTC |
| 172.64.198.60 | ip |
45
|
1 | PL | 2026-11-04 06:38 UTC | 2026-11-04 06:38 UTC |
| 172.64.198.61 | ip |
45
|
1 | PL | 2026-11-04 06:38 UTC | 2026-11-04 06:38 UTC |
| 20.164.214.25 | ip |
100
|
84 | ZA | 2026-11-04 06:49 UTC | 2026-11-04 06:38 UTC |
| 223.166.226.192 | ip |
18
|
1 | CN | 2026-11-04 06:37 UTC | 2026-11-04 06:37 UTC |
| 45.198.224.230 | ip |
86
|
5 | US | 2026-11-04 06:27 UTC | 2026-11-04 06:27 UTC |
| 151.243.11.208 | ip |
86
|
5 | AE | 2026-11-04 06:27 UTC | 2026-11-04 06:27 UTC |
| 151.243.11.203 | ip |
86
|
5 | AE | 2026-11-04 06:27 UTC | 2026-11-04 06:27 UTC |
| 35.210.137.3 | ip |
55
|
2 | BE | 2026-11-04 06:16 UTC | 2026-11-04 06:16 UTC |
| 47.84.60.55 | ip |
98
|
5 | SG | 2026-11-04 06:14 UTC | 2026-11-04 06:13 UTC |
| 46.183.117.121 | ip |
45
|
1 | ES | 2026-11-04 06:12 UTC | 2026-11-04 06:12 UTC |
| 103.67.78.129 | ip |
100
|
7 | ID | 2026-11-04 06:13 UTC | 2026-11-04 06:12 UTC |
| 185.247.224.43 | ip |
55
|
1 | RO | 2026-11-04 06:08 UTC | 2026-11-04 06:08 UTC |
| 104.248.61.156 | ip |
18
|
1 | US | 2026-11-04 06:04 UTC | 2026-11-04 06:04 UTC |
| 103.93.219.166 | ip |
100
|
42 | PK | 2026-11-04 06:29 UTC | 2026-11-04 05:59 UTC |
| 34.23.219.146 | ip |
100
|
26 | US | 2026-11-04 05:54 UTC | 2026-11-04 05:53 UTC |
| 47.101.171.159 | ip |
99
|
6 | CN | 2026-11-04 05:51 UTC | 2026-11-04 05:50 UTC |
| 86.48.2.136 | ip |
100
|
14 | FR | 2026-11-04 05:47 UTC | 2026-11-04 05:47 UTC |
| 8.134.95.40 | ip |
88
|
3 | CN | 2026-11-04 05:46 UTC | 2026-11-04 05:46 UTC |
| 147.182.165.92 | ip |
55
|
2 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 159.89.142.101 | ip |
18
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 178.128.11.78 | ip |
33
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
Showing 1-25 of 86505 indicators