IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 161.120.214.221 ip

Score
100
/100
raw: 1572.68
Reports
163
Last Reported
2026-11-06 07:00 UTC
Categories
Config Exposure Probe (126) Scanning (24) Admin Panel Probe (8) API Probe (5)

Network details

ASN
132203
Organization
Tencent Building, Kejizhongyi Avenue
Country
CN

Threat Intelligence enriched 2026-11-06 06:38 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-06 07:00 UTC catch-all-script direct GET /smtp/phpinfo.php
2026-11-06 06:59 UTC catch-all-admin direct GET /webmail/phpinfo.php
2026-11-06 06:59 UTC catch-all-script direct GET /hosting/phpinfo.php burst
2026-11-06 06:59 UTC catch-all-admin direct GET /cpanel/phpinfo.php burst
2026-11-06 06:59 UTC catch-all-script direct GET /mail/phpinfo.php burst
2026-11-06 06:59 UTC catch-all-script direct GET /webroot/index.php/_environment burst
2026-11-06 06:59 UTC debug-panel direct GET /_profiler/phpinfo
2026-11-06 06:59 UTC catch-all-script direct GET /server-status.php
2026-11-06 06:58 UTC catch-all-script direct GET /server-info.php
2026-11-06 06:58 UTC catch-all-script direct GET /old_phpinfo.php burst
2026-11-06 06:58 UTC catch-all-script direct GET /_phpinfo.php burst
2026-11-06 06:58 UTC catch-all-script direct GET /phpversion.php burst
2026-11-06 06:58 UTC catch-all-script direct GET /php-info.php burst
2026-11-06 06:58 UTC catch-all-script direct GET /public/phpinfo.php
2026-11-06 06:58 UTC catch-all-script direct GET /tmp/phpinfo.php
2026-11-06 06:57 UTC catch-all-script direct GET /old/phpinfo.php
2026-11-06 06:57 UTC catch-all-script direct GET /dev/phpinfo.php
2026-11-06 06:57 UTC catch-all-script direct GET /test/phpinfo.php burst
2026-11-06 06:57 UTC admin direct GET /admin/phpinfo.php burst
2026-11-06 06:57 UTC catch-all-admin direct GET /debug.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
20.163.57.236 ip
18
 1 US 2026-11-06 07:26 UTC 2026-11-06 07:26 UTC
134.209.22.98 ip
94
 4 GB 2026-11-06 07:26 UTC 2026-11-06 07:26 UTC
20.51.210.97 ip
18
 1 US 2026-11-06 07:26 UTC 2026-11-06 07:26 UTC
20.65.169.148 ip
18
 1 US 2026-11-06 07:23 UTC 2026-11-06 07:23 UTC
52.186.183.216 ip
18
 1 US 2026-11-06 07:23 UTC 2026-11-06 07:23 UTC
51.159.148.61 ip
55
 4 FR 2026-11-06 07:12 UTC 2026-11-06 07:12 UTC
157.245.153.57 ip
97
 12 SG 2026-11-06 06:56 UTC 2026-11-06 06:53 UTC
42.115.193.188 ip
100
 12 VN 2026-11-06 06:51 UTC 2026-11-06 06:50 UTC
187.191.37.251 ip
100
 13 MX 2026-11-06 06:51 UTC 2026-11-06 06:50 UTC
143.244.51.159 ip
100
 12 US 2026-11-06 06:51 UTC 2026-11-06 06:50 UTC
73.46.4.176 ip
100
 15 US 2026-11-06 06:50 UTC 2026-11-06 06:48 UTC
177.137.145.102 ip
100
 14 BR 2026-11-06 06:50 UTC 2026-11-06 06:48 UTC
45.172.118.249 ip
59
 2 BR 2026-11-06 06:48 UTC 2026-11-06 06:48 UTC
188.68.36.28 ip
55
 1 DE 2026-11-06 06:44 UTC 2026-11-06 06:44 UTC
194.32.152.91 ip
50
 1 BE 2026-11-06 06:38 UTC 2026-11-06 06:38 UTC
161.120.214.221 ip
100
 163 CN 2026-11-06 07:00 UTC 2026-11-06 06:38 UTC
185.3.217.197 ip
50
 1 BE 2026-11-06 06:34 UTC 2026-11-06 06:34 UTC
59.125.102.142 ip
50
 1 TW 2026-11-06 06:22 UTC 2026-11-06 06:22 UTC
188.166.41.178 ip
70
 2 NL 2026-11-06 06:19 UTC 2026-11-06 06:19 UTC
45.156.129.136 ip
18
 1 PT 2026-11-06 06:18 UTC 2026-11-06 06:18 UTC
190.22.77.185 ip
63
 2 CL 2026-11-06 06:11 UTC 2026-11-06 06:11 UTC
178.86.154.184 ip
93
 4 SA 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
135.125.175.229 ip
50
 1 FR 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
88.162.218.236 ip
78
 3 FR 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
190.101.108.15 ip
78
 3 CL 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC

Showing 1-25 of 87288 indicators