IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.109.86.225 ip

Score
1
/100
raw: 0.07
Reports
17
Last Reported
2026-06-06 02:36 UTC
Categories
Config Exposure Probe (12) Scanning (3) API Probe (1) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 12:15 UTC

DNSBL Status
Clean

Sensor Activity last 17 events

Time (UTC) Trap Signal Method Path Flags
2026-06-06 02:35 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-06 02:35 UTC sql-dump direct GET /dump.sql burst
2026-06-06 02:35 UTC catch-all-config direct GET /.htpasswd burst
2026-06-06 02:35 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-06 02:35 UTC config-php direct GET /config.php burst
2026-06-06 02:35 UTC ds-store direct GET /.DS_Store burst
2026-06-06 02:35 UTC actuator direct GET /actuator/env burst
2026-06-06 02:35 UTC catch-all-script direct GET /phpinfo.php burst
2026-06-06 02:35 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-06 02:35 UTC aws-creds direct GET /.aws/credentials burst
2026-06-06 02:35 UTC wp-config direct GET /wp-config.php burst
2026-06-06 02:35 UTC catch-all-config direct GET /.env.save burst
2026-06-06 02:35 UTC catch-all-config direct GET /.env.production burst
2026-06-06 02:35 UTC catch-all-config direct GET /.env.local
2026-06-06 02:35 UTC dot-env direct GET /.env
2026-06-06 02:35 UTC git-config direct GET /.git/config
2026-06-06 02:35 UTC git-head direct GET /.git/HEAD

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
45.171.47.188 ip
50
 1 BR 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
138.36.34.220 ip
39
 1 BR 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
196.189.24.29 ip
50
 1 ET 2026-11-08 15:49 UTC 2026-11-08 15:49 UTC
109.248.193.8 ip
39
 1 RU 2026-11-08 15:48 UTC 2026-11-08 15:48 UTC
45.195.154.155 ip
39
 1 PH 2026-11-08 15:47 UTC 2026-11-08 15:47 UTC
122.183.42.130 ip
39
 1 IN 2026-11-08 15:47 UTC 2026-11-08 15:47 UTC
37.25.107.145 ip
39
 1 UA 2026-11-08 15:45 UTC 2026-11-08 15:45 UTC
196.189.190.1 ip
50
 1 ET 2026-11-08 15:43 UTC 2026-11-08 15:43 UTC
221.218.192.102 ip
39
 1 CN 2026-11-08 15:42 UTC 2026-11-08 15:42 UTC
41.250.178.115 ip
50
 1 MA 2026-11-08 15:42 UTC 2026-11-08 15:42 UTC
94.207.171.192 ip
50
 1 AE 2026-11-08 15:41 UTC 2026-11-08 15:41 UTC
105.68.135.50 ip
39
 1 MA 2026-11-08 15:39 UTC 2026-11-08 15:39 UTC
175.107.204.127 ip
50
 1 PK 2026-11-08 15:38 UTC 2026-11-08 15:38 UTC
176.108.85.162 ip
39
 1 KZ 2026-11-08 15:38 UTC 2026-11-08 15:38 UTC
183.13.75.163 ip
50
 1 CN 2026-11-08 15:38 UTC 2026-11-08 15:38 UTC
186.131.186.255 ip
50
 1 AR 2026-11-08 15:36 UTC 2026-11-08 15:36 UTC
95.25.58.199 ip
39
 1 RU 2026-11-08 15:35 UTC 2026-11-08 15:35 UTC
124.82.50.167 ip
50
 1 MY 2026-11-08 15:34 UTC 2026-11-08 15:34 UTC
37.40.228.4 ip
50
 1 OM 2026-11-08 15:34 UTC 2026-11-08 15:34 UTC
223.178.91.14 ip
50
 1 IN 2026-11-08 15:33 UTC 2026-11-08 15:33 UTC
24.200.142.19 ip
39
 1 CA 2026-11-08 15:32 UTC 2026-11-08 15:32 UTC
157.245.132.53 ip
94
 4 US 2026-11-08 15:31 UTC 2026-11-08 15:30 UTC
34.11.226.164 ip
100
 352 US 2026-11-08 15:49 UTC 2026-11-08 15:29 UTC
91.116.119.186 ip
39
 1 ES 2026-11-08 15:28 UTC 2026-11-08 15:28 UTC
103.166.101.90 ip
50
 1 NP 2026-11-08 15:28 UTC 2026-11-08 15:28 UTC

Showing 1-25 of 88828 indicators