IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 205.210.31.41 ip
Score
80
/100
raw: 16.17
Reports
14
Last Reported
2026-11-06 01:15 UTC
Categories
Scanning (9)
Web Stack Probe (5)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 09:07 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 13 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-06 01:14 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-11-06 00:47 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-11-03 06:37 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-11-03 00:33 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-11-03 00:21 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-14 00:24 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-05 00:42 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-10-05 00:31 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-09-20 00:20 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-09-18 15:43 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-08-30 00:15 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-08-06 00:20 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-05-31 00:39 UTC | catch-all-suspicious | direct | GET | /shell |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 213.230.87.212 | ip |
39
|
1 | UZ | 2026-11-07 16:39 UTC | 2026-11-07 16:39 UTC |
| 102.23.40.46 | ip |
39
|
1 | BF | 2026-11-07 16:38 UTC | 2026-11-07 16:38 UTC |
| 172.58.121.144 | ip |
50
|
1 | US | 2026-11-07 16:38 UTC | 2026-11-07 16:38 UTC |
| 185.223.235.32 | ip |
39
|
1 | NL | 2026-11-07 16:37 UTC | 2026-11-07 16:37 UTC |
| 169.224.70.219 | ip |
50
|
1 | IQ | 2026-11-07 16:37 UTC | 2026-11-07 16:37 UTC |
| 129.226.49.126 | ip |
100
|
63 | HK | 2026-11-07 16:41 UTC | 2026-11-07 16:37 UTC |
| 181.118.37.131 | ip |
39
|
1 | TT | 2026-11-07 16:36 UTC | 2026-11-07 16:36 UTC |
| 190.158.29.36 | ip |
50
|
1 | CO | 2026-11-07 16:35 UTC | 2026-11-07 16:35 UTC |
| 213.230.92.111 | ip |
50
|
1 | UZ | 2026-11-07 16:34 UTC | 2026-11-07 16:34 UTC |
| 94.230.133.66 | ip |
50
|
1 | RU | 2026-11-07 16:33 UTC | 2026-11-07 16:33 UTC |
| 212.15.63.136 | ip |
39
|
1 | RU | 2026-11-07 16:31 UTC | 2026-11-07 16:31 UTC |
| 20.84.153.123 | ip |
18
|
1 | US | 2026-11-07 16:29 UTC | 2026-11-07 16:29 UTC |
| 20.221.59.29 | ip |
18
|
1 | US | 2026-11-07 16:28 UTC | 2026-11-07 16:28 UTC |
| 172.212.227.85 | ip |
18
|
1 | US | 2026-11-07 16:27 UTC | 2026-11-07 16:27 UTC |
| 189.203.231.91 | ip |
39
|
1 | MX | 2026-11-07 16:27 UTC | 2026-11-07 16:27 UTC |
| 201.132.249.10 | ip |
39
|
1 | MX | 2026-11-07 16:26 UTC | 2026-11-07 16:26 UTC |
| 38.211.222.115 | ip |
50
|
1 | CD | 2026-11-07 16:24 UTC | 2026-11-07 16:24 UTC |
| 59.98.128.29 | ip |
39
|
1 | IN | 2026-11-07 16:22 UTC | 2026-11-07 16:22 UTC |
| 193.41.76.190 | ip |
50
|
1 | RU | 2026-11-07 16:17 UTC | 2026-11-07 16:17 UTC |
| 103.121.179.198 | ip |
39
|
1 | PK | 2026-11-07 16:17 UTC | 2026-11-07 16:17 UTC |
| 79.117.169.149 | ip |
50
|
1 | ES | 2026-11-07 16:17 UTC | 2026-11-07 16:17 UTC |
| 45.88.217.142 | ip |
99
|
5 | US | 2026-11-07 16:18 UTC | 2026-11-07 16:17 UTC |
| 194.60.255.15 | ip |
39
|
1 | UA | 2026-11-07 16:15 UTC | 2026-11-07 16:15 UTC |
| 109.105.209.72 | ip |
18
|
1 | PT | 2026-11-07 16:15 UTC | 2026-11-07 16:15 UTC |
| 136.69.234.246 | ip |
18
|
1 | US | 2026-11-07 16:14 UTC | 2026-11-07 16:14 UTC |
Showing 1-25 of 88056 indicators