IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 205.210.31.193 ip
Score
68
/100
raw: 11.39
Reports
13
Last Reported
2026-11-06 01:35 UTC
Categories
Web Stack Probe (10)
Scanning (3)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 06:18 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 13 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-06 01:34 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-14 09:22 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-12 07:21 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-08 21:16 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-08 21:16 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-08 21:14 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-10-08 21:10 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-26 18:11 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-09-24 00:33 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-08-31 15:17 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-08-26 21:29 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-25 09:17 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-05-27 00:13 UTC | catch-all-suspicious | direct | GET | /webshell |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 172.68.195.166 | ip |
70
|
2 | DE | 2026-11-06 18:57 UTC | 2026-11-06 18:57 UTC |
| 51.81.169.203 | ip |
18
|
1 | US | 2026-11-06 18:57 UTC | 2026-11-06 18:57 UTC |
| 190.163.238.177 | ip |
100
|
21 | CL | 2026-11-06 18:57 UTC | 2026-11-06 18:55 UTC |
| 170.150.157.26 | ip |
100
|
20 | CL | 2026-11-06 18:57 UTC | 2026-11-06 18:55 UTC |
| 149.248.79.52 | ip |
75
|
4 | US | 2026-11-06 18:50 UTC | 2026-11-06 18:50 UTC |
| 99.228.243.187 | ip |
86
|
4 | CA | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 190.114.43.233 | ip |
39
|
1 | CL | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 5.248.126.201 | ip |
70
|
2 | UA | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 41.90.136.140 | ip |
39
|
1 | KE | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 37.139.39.83 | ip |
39
|
1 | RU | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 188.190.95.174 | ip |
39
|
1 | UA | 2026-11-06 18:41 UTC | 2026-11-06 18:41 UTC |
| 187.243.192.19 | ip |
99
|
9 | MX | 2026-11-06 18:40 UTC | 2026-11-06 18:40 UTC |
| 185.2.184.61 | ip |
99
|
6 | RU | 2026-11-06 18:40 UTC | 2026-11-06 18:39 UTC |
| 103.226.195.99 | ip |
100
|
10 | ES | 2026-11-06 18:40 UTC | 2026-11-06 18:39 UTC |
| 141.98.11.8 | ip |
99
|
7 | LT | 2026-11-06 18:39 UTC | 2026-11-06 18:38 UTC |
| 94.73.24.138 | ip |
100
|
18 | PS | 2026-11-06 18:39 UTC | 2026-11-06 18:37 UTC |
| 194.32.153.69 | ip |
50
|
1 | BE | 2026-11-06 18:32 UTC | 2026-11-06 18:32 UTC |
| 102.214.117.54 | ip |
100
|
27 | ZA | 2026-11-06 18:28 UTC | 2026-11-06 18:24 UTC |
| 89.92.120.46 | ip |
100
|
30 | FR | 2026-11-06 18:28 UTC | 2026-11-06 18:24 UTC |
| 213.200.31.3 | ip |
100
|
29 | GE | 2026-11-06 18:28 UTC | 2026-11-06 18:24 UTC |
| 138.68.147.39 | ip |
93
|
4 | GB | 2026-11-06 18:24 UTC | 2026-11-06 18:24 UTC |
| 212.30.33.247 | ip |
100
|
11 | ES | 2026-11-06 18:22 UTC | 2026-11-06 18:21 UTC |
| 81.180.253.175 | ip |
45
|
1 | RO | 2026-11-06 18:18 UTC | 2026-11-06 18:18 UTC |
| 103.129.125.171 | ip |
100
|
31 | PH | 2026-11-06 18:22 UTC | 2026-11-06 18:18 UTC |
| 102.217.240.151 | ip |
100
|
30 | ZA | 2026-11-06 18:22 UTC | 2026-11-06 18:18 UTC |
Showing 1-25 of 87544 indicators