IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 205.210.31.16 ip
Score
75
/100
raw: 13.98
Reports
15
Last Reported
2026-11-03 21:42 UTC
Categories
Web Stack Probe (12)
Scanning (3)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 05:09 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-03 21:42 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-21 18:05 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-21 18:05 UTC | wp-json | direct | GET | / | |
| 2026-10-11 01:24 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-02 06:18 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-02 06:18 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-01 00:23 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-09-23 21:09 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-11 15:32 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-09 00:35 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-09-01 21:07 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-27 21:06 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-05-23 18:13 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-05-23 00:19 UTC | wp-login | direct | GET | /wp-login.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 49.194.196.40 | ip |
39
|
1 | AU | 2026-11-06 03:18 UTC | 2026-11-06 03:18 UTC |
| 216.25.90.84 | ip |
63
|
2 | US | 2026-11-06 03:11 UTC | 2026-11-06 03:10 UTC |
| 187.180.148.21 | ip |
39
|
1 | BR | 2026-11-06 03:04 UTC | 2026-11-06 03:04 UTC |
| 35.210.174.30 | ip |
55
|
2 | BE | 2026-11-06 03:04 UTC | 2026-11-06 03:04 UTC |
| 177.226.179.112 | ip |
39
|
1 | MX | 2026-11-06 03:01 UTC | 2026-11-06 03:01 UTC |
| 35.206.135.80 | ip |
55
|
2 | BE | 2026-11-06 02:52 UTC | 2026-11-06 02:52 UTC |
| 191.97.14.236 | ip |
39
|
1 | CO | 2026-11-06 02:45 UTC | 2026-11-06 02:45 UTC |
| 43.131.52.116 | ip |
100
|
163 | DE | 2026-11-06 02:59 UTC | 2026-11-06 02:37 UTC |
| 66.113.234.108 | ip |
100
|
10 | US | 2026-11-06 02:38 UTC | 2026-11-06 02:37 UTC |
| 172.69.150.195 | ip |
70
|
2 | DE | 2026-11-06 02:36 UTC | 2026-11-06 02:36 UTC |
| 103.174.214.73 | ip |
39
|
1 | BD | 2026-11-06 02:35 UTC | 2026-11-06 02:35 UTC |
| 86.106.219.180 | ip |
39
|
1 | MD | 2026-11-06 02:28 UTC | 2026-11-06 02:28 UTC |
| 144.76.32.235 | ip |
39
|
1 | DE | 2026-11-06 02:25 UTC | 2026-11-06 02:25 UTC |
| 172.68.194.184 | ip |
70
|
2 | DE | 2026-11-06 02:22 UTC | 2026-11-06 02:22 UTC |
| 45.138.12.217 | ip |
96
|
4 | LT | 2026-11-06 03:01 UTC | 2026-11-06 02:19 UTC |
| 82.165.94.38 | ip |
100
|
10 | FR | 2026-11-06 02:12 UTC | 2026-11-06 02:11 UTC |
| 187.189.212.137 | ip |
39
|
1 | MX | 2026-11-06 02:11 UTC | 2026-11-06 02:11 UTC |
| 47.245.177.215 | ip |
50
|
1 | DE | 2026-11-06 02:08 UTC | 2026-11-06 02:08 UTC |
| 196.245.54.186 | ip |
100
|
170 | ES | 2026-11-06 02:08 UTC | 2026-11-06 02:07 UTC |
| 92.60.21.57 | ip |
39
|
1 | AL | 2026-11-06 02:05 UTC | 2026-11-06 02:05 UTC |
| 185.61.217.140 | ip |
50
|
1 | RU | 2026-11-06 02:04 UTC | 2026-11-06 02:04 UTC |
| 51.81.169.206 | ip |
18
|
1 | US | 2026-11-06 01:47 UTC | 2026-11-06 01:47 UTC |
| 175.107.208.173 | ip |
18
|
1 | PK | 2026-11-06 01:46 UTC | 2026-11-06 01:46 UTC |
| 184.198.34.100 | ip |
33
|
2 | US | 2026-11-06 01:47 UTC | 2026-11-06 01:46 UTC |
| 209.250.252.171 | ip |
33
|
2 | NL | 2026-11-06 02:19 UTC | 2026-11-06 01:41 UTC |
Showing 1-25 of 87225 indicators