IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 205.210.31.220 ip
Score
67
/100
raw: 11.2
Reports
11
Last Reported
2026-10-25 01:02 UTC
Categories
Web Stack Probe (7)
Scanning (4)
Network details
ASN
396982
Organization
Google LLC
Country
SG
Threat Intelligence enriched 2026-05-10 21:12 UTC
Sensor Activity last 9 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-10-25 01:02 UTC | wp-login | direct | GET | /wp-login.php | US West Sensor | |
| 2026-10-24 00:51 UTC | catch-all-suspicious | direct | GET | /shell | OC East Sensor | |
| 2026-10-24 00:46 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | EU West Sensor 4 | |
| 2026-10-19 21:24 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | US West Sensor | |
| 2026-10-14 01:13 UTC | catch-all-script | direct | GET | /shell.php | EU West Sensor 3 | |
| 2026-09-05 21:08 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | EU West Sensor 4 | |
| 2026-07-12 00:28 UTC | catch-all-script | direct | GET | /shell.php | US West Sensor | |
| 2026-05-27 00:19 UTC | catch-all-script | direct | GET | /webshell.php | EU West Sensor 3 | |
| 2026-05-23 18:07 UTC | wp-login | direct | GET | /wp-login.php | EU West Sensor 4 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 103.159.170.35 | ip |
39
|
1 | BD | 2026-11-02 16:02 UTC | 2026-11-02 16:02 UTC |
| 186.96.97.67 | ip |
39
|
1 | CO | 2026-11-02 16:02 UTC | 2026-11-02 16:02 UTC |
| 190.114.33.96 | ip |
50
|
1 | CL | 2026-11-02 16:02 UTC | 2026-11-02 16:02 UTC |
| 45.4.47.244 | ip |
39
|
1 | BR | 2026-11-02 16:01 UTC | 2026-11-02 16:01 UTC |
| 86.120.126.184 | ip |
39
|
1 | RO | 2026-11-02 16:00 UTC | 2026-11-02 16:00 UTC |
| 94.49.45.155 | ip |
39
|
1 | SA | 2026-11-02 15:59 UTC | 2026-11-02 15:59 UTC |
| 85.238.125.57 | ip |
50
|
1 | UA | 2026-11-02 15:59 UTC | 2026-11-02 15:59 UTC |
| 170.231.235.136 | ip |
50
|
1 | BR | 2026-11-02 15:58 UTC | 2026-11-02 15:58 UTC |
| 181.39.29.246 | ip |
39
|
1 | EC | 2026-11-02 15:57 UTC | 2026-11-02 15:57 UTC |
| 38.183.5.251 | ip |
39
|
1 | IN | 2026-11-02 15:57 UTC | 2026-11-02 15:57 UTC |
| 181.55.20.106 | ip |
39
|
1 | CO | 2026-11-02 15:57 UTC | 2026-11-02 15:57 UTC |
| 217.60.249.114 | ip |
18
|
1 | FI | 2026-11-02 15:57 UTC | 2026-11-02 15:57 UTC |
| 122.168.4.247 | ip |
39
|
1 | IN | 2026-11-02 15:57 UTC | 2026-11-02 15:57 UTC |
| 106.219.66.200 | ip |
39
|
1 | IN | 2026-11-02 15:56 UTC | 2026-11-02 15:56 UTC |
| 89.41.103.113 | ip |
39
|
1 | MD | 2026-11-02 15:56 UTC | 2026-11-02 15:56 UTC |
| 104.155.206.65 | ip |
100
|
65 | SG | 2026-11-02 15:55 UTC | 2026-11-02 15:55 UTC |
| 91.197.105.61 | ip |
39
|
1 | RU | 2026-11-02 15:55 UTC | 2026-11-02 15:55 UTC |
| 103.248.206.93 | ip |
39
|
1 | BD | 2026-11-02 15:55 UTC | 2026-11-02 15:55 UTC |
| 123.0.16.36 | ip |
50
|
1 | BD | 2026-11-02 15:54 UTC | 2026-11-02 15:54 UTC |
| 59.184.117.14 | ip |
39
|
1 | IN | 2026-11-02 15:54 UTC | 2026-11-02 15:54 UTC |
| 176.49.161.254 | ip |
39
|
1 | RU | 2026-11-02 15:53 UTC | 2026-11-02 15:53 UTC |
| 212.164.179.136 | ip |
39
|
1 | RU | 2026-11-02 15:53 UTC | 2026-11-02 15:53 UTC |
| 195.177.93.121 | ip |
100
|
118 | SG | 2026-11-02 15:51 UTC | 2026-11-02 15:51 UTC |
| 178.159.211.249 | ip |
50
|
1 | UA | 2026-11-02 15:48 UTC | 2026-11-02 15:48 UTC |
| 85.171.86.139 | ip |
50
|
1 | FR | 2026-11-02 15:48 UTC | 2026-11-02 15:48 UTC |
Showing 1-25 of 84053 indicators