IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.46 ip
Score
44
/100
raw: 5.75
Reports
14
Last Reported
2026-10-20 15:11 UTC
Categories
Scanning (8)
Web Stack Probe (6)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 19:12 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 13 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-10-20 15:10 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-15 01:28 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-15 00:49 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-15 00:39 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-12 01:12 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-10-06 12:17 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-16 00:23 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-09-16 00:20 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-09-07 06:22 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-09-07 06:22 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-26 00:27 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-08-14 06:24 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-16 00:08 UTC | wp-login | direct | GET | /wp-login.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 185.99.5.239 | ip |
50
|
1 | RU | 2026-11-10 00:49 UTC | 2026-11-10 00:49 UTC |
| 190.177.235.19 | ip |
50
|
1 | AR | 2026-11-10 00:48 UTC | 2026-11-10 00:48 UTC |
| 82.96.101.98 | ip |
50
|
1 | DE | 2026-11-10 00:48 UTC | 2026-11-10 00:48 UTC |
| 63.143.93.131 | ip |
50
|
1 | JM | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 45.182.61.52 | ip |
50
|
1 | BR | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 181.160.56.22 | ip |
50
|
1 | CL | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 94.31.94.146 | ip |
50
|
1 | DE | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 142.154.123.147 | ip |
50
|
1 | SA | 2026-11-10 00:45 UTC | 2026-11-10 00:45 UTC |
| 51.81.165.211 | ip |
18
|
1 | US | 2026-11-10 00:45 UTC | 2026-11-10 00:45 UTC |
| 102.200.188.131 | ip |
50
|
1 | ZA | 2026-11-10 00:44 UTC | 2026-11-10 00:44 UTC |
| 190.122.185.187 | ip |
50
|
1 | GT | 2026-11-10 00:43 UTC | 2026-11-10 00:43 UTC |
| 45.239.238.17 | ip |
50
|
1 | BR | 2026-11-10 00:43 UTC | 2026-11-10 00:43 UTC |
| 177.245.233.71 | ip |
50
|
1 | MX | 2026-11-10 00:43 UTC | 2026-11-10 00:43 UTC |
| 216.25.90.89 | ip |
18
|
1 | US | 2026-11-10 00:42 UTC | 2026-11-10 00:42 UTC |
| 37.61.119.42 | ip |
50
|
1 | AZ | 2026-11-10 00:41 UTC | 2026-11-10 00:41 UTC |
| 85.244.228.47 | ip |
50
|
1 | PT | 2026-11-10 00:40 UTC | 2026-11-10 00:40 UTC |
| 128.78.98.82 | ip |
50
|
1 | FR | 2026-11-10 00:39 UTC | 2026-11-10 00:39 UTC |
| 14.239.165.115 | ip |
50
|
1 | VN | 2026-11-10 00:38 UTC | 2026-11-10 00:38 UTC |
| 196.206.8.147 | ip |
50
|
1 | MA | 2026-11-10 00:38 UTC | 2026-11-10 00:38 UTC |
| 190.134.235.254 | ip |
50
|
1 | UY | 2026-11-10 00:37 UTC | 2026-11-10 00:37 UTC |
| 170.254.160.157 | ip |
50
|
1 | BR | 2026-11-10 00:36 UTC | 2026-11-10 00:36 UTC |
| 179.24.122.250 | ip |
50
|
1 | UY | 2026-11-10 00:36 UTC | 2026-11-10 00:36 UTC |
| 176.215.224.233 | ip |
50
|
1 | RU | 2026-11-10 00:36 UTC | 2026-11-10 00:36 UTC |
| 190.162.36.96 | ip |
50
|
1 | CL | 2026-11-10 00:35 UTC | 2026-11-10 00:35 UTC |
| 187.190.136.250 | ip |
50
|
1 | MX | 2026-11-10 00:34 UTC | 2026-11-10 00:34 UTC |
Showing 1-25 of 91160 indicators