IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.52 ip
Score
79
/100
raw: 15.82
Reports
12
Last Reported
2026-11-06 21:21 UTC
Categories
Web Stack Probe (6)
Scanning (6)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 23:15 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-06 21:20 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-11-06 21:20 UTC | wp-json | direct | GET | / | |
| 2026-11-01 00:33 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-12 01:05 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-12 00:52 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-12 00:48 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-12 00:28 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-05 00:49 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-01 21:10 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-01 21:10 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-20 00:16 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-06-25 00:19 UTC | wp-login | direct | GET | /wp-login.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 103.77.239.190 | ip |
50
|
1 | IN | 2026-11-11 07:58 UTC | 2026-11-11 07:58 UTC |
| 194.44.50.90 | ip |
50
|
1 | UA | 2026-11-11 07:58 UTC | 2026-11-11 07:58 UTC |
| 187.191.36.98 | ip |
50
|
1 | MX | 2026-11-11 07:57 UTC | 2026-11-11 07:57 UTC |
| 73.235.102.70 | ip |
39
|
1 | US | 2026-11-11 07:56 UTC | 2026-11-11 07:56 UTC |
| 167.150.206.66 | ip |
50
|
1 | LC | 2026-11-11 07:56 UTC | 2026-11-11 07:56 UTC |
| 177.249.174.223 | ip |
39
|
1 | MX | 2026-11-11 07:56 UTC | 2026-11-11 07:56 UTC |
| 162.158.182.71 | ip |
70
|
2 | SE | 2026-11-11 07:56 UTC | 2026-11-11 07:56 UTC |
| 103.17.51.69 | ip |
50
|
1 | IN | 2026-11-11 07:55 UTC | 2026-11-11 07:55 UTC |
| 148.222.194.95 | ip |
50
|
1 | AR | 2026-11-11 07:55 UTC | 2026-11-11 07:55 UTC |
| 152.59.39.206 | ip |
39
|
1 | IN | 2026-11-11 07:55 UTC | 2026-11-11 07:55 UTC |
| 45.115.188.20 | ip |
39
|
1 | IN | 2026-11-11 07:54 UTC | 2026-11-11 07:54 UTC |
| 109.184.13.202 | ip |
50
|
1 | RU | 2026-11-11 07:54 UTC | 2026-11-11 07:54 UTC |
| 101.53.251.105 | ip |
39
|
1 | PK | 2026-11-11 07:54 UTC | 2026-11-11 07:54 UTC |
| 106.76.186.227 | ip |
39
|
1 | IN | 2026-11-11 07:54 UTC | 2026-11-11 07:54 UTC |
| 36.143.169.123 | ip |
39
|
1 | CN | 2026-11-11 07:54 UTC | 2026-11-11 07:54 UTC |
| 103.126.150.185 | ip |
50
|
1 | BD | 2026-11-11 07:52 UTC | 2026-11-11 07:52 UTC |
| 31.171.186.200 | ip |
39
|
1 | KZ | 2026-11-11 07:52 UTC | 2026-11-11 07:52 UTC |
| 103.135.253.170 | ip |
39
|
1 | BD | 2026-11-11 07:52 UTC | 2026-11-11 07:52 UTC |
| 190.112.15.89 | ip |
50
|
1 | AR | 2026-11-11 07:52 UTC | 2026-11-11 07:52 UTC |
| 41.173.33.207 | ip |
50
|
1 | RW | 2026-11-11 07:51 UTC | 2026-11-11 07:51 UTC |
| 187.13.244.59 | ip |
50
|
1 | CA | 2026-11-11 07:51 UTC | 2026-11-11 07:51 UTC |
| 45.132.184.79 | ip |
50
|
1 | RU | 2026-11-11 07:49 UTC | 2026-11-11 07:49 UTC |
| 84.54.72.95 | ip |
50
|
1 | UZ | 2026-11-11 07:49 UTC | 2026-11-11 07:49 UTC |
| 223.29.232.46 | ip |
39
|
1 | PK | 2026-11-11 07:49 UTC | 2026-11-11 07:49 UTC |
| 82.167.169.227 | ip |
39
|
1 | SA | 2026-11-11 07:48 UTC | 2026-11-11 07:48 UTC |
Showing 1-25 of 92938 indicators