IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 198.235.24.98 ip
Score
50
/100
raw: 6.88
Reports
15
Last Reported
2026-10-23 00:25 UTC
Categories
Scanning (11)
Web Stack Probe (4)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 07:15 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-10-23 00:25 UTC | wp-json | direct | GET | / | |
| 2026-10-14 01:23 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-14 01:13 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-10-14 00:40 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-13 00:43 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-10-03 01:15 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-09-30 00:35 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-09-11 15:32 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-08-31 15:19 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-08-31 15:19 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-16 00:16 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-07-25 00:11 UTC | catch-all-suspicious | direct | GET | /webshell |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 32.194.171.18 | ip |
55
|
4 | US | 2026-11-07 01:28 UTC | 2026-11-07 01:27 UTC |
| 174.138.7.0 | ip |
99
|
7 | NL | 2026-11-07 01:22 UTC | 2026-11-07 01:21 UTC |
| 69.58.6.172 | ip |
26
|
1 | US | 2026-11-07 01:17 UTC | 2026-11-07 01:17 UTC |
| 172.86.119.239 | ip |
70
|
2 | US | 2026-11-07 01:16 UTC | 2026-11-07 01:16 UTC |
| 216.25.90.56 | ip |
45
|
2 | US | 2026-11-07 01:24 UTC | 2026-11-07 01:14 UTC |
| 64.49.11.136 | ip |
55
|
1 | GB | 2026-11-07 01:04 UTC | 2026-11-07 01:04 UTC |
| 216.25.90.86 | ip |
18
|
1 | US | 2026-11-07 01:02 UTC | 2026-11-07 01:02 UTC |
| 161.193.1.170 | ip |
45
|
1 | US | 2026-11-07 00:45 UTC | 2026-11-07 00:45 UTC |
| 86.38.187.178 | ip |
39
|
1 | LT | 2026-11-07 00:44 UTC | 2026-11-07 00:44 UTC |
| 98.159.37.84 | ip |
91
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.85 | ip |
99
|
6 | US | 2026-11-07 00:36 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.155 | ip |
100
|
12 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.159 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.165 | ip |
100
|
8 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.153 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.156 | ip |
100
|
8 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.158 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.154 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.81 | ip |
100
|
11 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.151 | ip |
100
|
8 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.174 | ip |
100
|
11 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.52 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.79 | ip |
98
|
7 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.150 | ip |
91
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.161 | ip |
95
|
5 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
Showing 1-25 of 87692 indicators