IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.112.122.54 ip

Score
1
/100
raw: 0.06
Reports
15
Last Reported
2026-06-02 15:46 UTC
Categories
Config Exposure Probe (9) Scanning (3) Admin Panel Probe (1) API Probe (1) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 10:10 UTC

DNSBL Status
Clean

Sensor Activity last 15 events

Time (UTC) Trap Signal Method Path Flags
2026-06-02 15:46 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-02 15:46 UTC sql-dump direct GET /backup.sql burst
2026-06-02 15:46 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-02 15:46 UTC config-php direct GET /config.php burst
2026-06-02 15:46 UTC ds-store direct GET /.DS_Store burst
2026-06-02 15:46 UTC actuator direct GET /actuator/env burst
2026-06-02 15:46 UTC server-status direct GET /server-status burst
2026-06-02 15:46 UTC catch-all-script direct GET /phpinfo.php burst
2026-06-02 15:46 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-02 15:46 UTC aws-creds direct GET /.aws/credentials burst
2026-06-02 15:46 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-02 15:46 UTC catch-all-config direct GET /.env.save
2026-06-02 15:46 UTC catch-all-config direct GET /.env.backup
2026-06-02 15:46 UTC catch-all-config direct GET /.env.local
2026-06-02 15:46 UTC git-config direct GET /.git/config

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
188.135.21.222 ip
39
 1 OM 2026-11-08 03:21 UTC 2026-11-08 03:21 UTC
51.81.169.200 ip
18
 1 US 2026-11-08 02:59 UTC 2026-11-08 02:59 UTC
217.199.254.209 ip
45
 1 RU 2026-11-08 02:51 UTC 2026-11-08 02:51 UTC
172.64.200.170 ip
45
 1 PL 2026-11-08 02:29 UTC 2026-11-08 02:29 UTC
172.64.200.207 ip
45
 1 PL 2026-11-08 02:29 UTC 2026-11-08 02:29 UTC
196.196.160.48 ip
50
 1 IT 2026-11-08 02:20 UTC 2026-11-08 02:20 UTC
140.235.0.16 ip
39
 1 US 2026-11-08 01:43 UTC 2026-11-08 01:43 UTC
31.77.219.53 ip
99
 6 DE 2026-11-08 01:40 UTC 2026-11-08 01:39 UTC
89.116.122.22 ip
45
 1 IN 2026-11-08 01:33 UTC 2026-11-08 01:33 UTC
165.140.238.132 ip
45
 1 US 2026-11-08 01:13 UTC 2026-11-08 01:13 UTC
206.189.31.125 ip
45
 1 GB 2026-11-08 01:12 UTC 2026-11-08 01:12 UTC
66.163.114.126 ip
39
 1 US 2026-11-08 00:54 UTC 2026-11-08 00:54 UTC
134.209.119.162 ip
94
 4 US 2026-11-08 00:40 UTC 2026-11-08 00:40 UTC
195.178.110.78 ip
100
 17 BG 2026-11-08 02:33 UTC 2026-11-08 00:36 UTC
162.158.102.132 ip
45
 1 PL 2026-11-08 00:23 UTC 2026-11-08 00:23 UTC
162.158.102.133 ip
45
 1 PL 2026-11-08 00:23 UTC 2026-11-08 00:23 UTC
115.129.129.35 ip
70
 2 AU 2026-11-08 00:17 UTC 2026-11-08 00:17 UTC
34.62.254.152 ip
100
 121 BE 2026-11-08 00:16 UTC 2026-11-08 00:16 UTC
34.22.196.121 ip
100
 120 BE 2026-11-08 00:12 UTC 2026-11-08 00:11 UTC
200.138.46.116 ip
39
 1 AE 2026-11-08 00:07 UTC 2026-11-08 00:07 UTC
102.133.224.63 ip
100
 382 ZA 2026-11-08 01:31 UTC 2026-11-08 00:05 UTC
43.155.169.154 ip
100
 326 KR 2026-11-08 00:22 UTC 2026-11-07 23:59 UTC
172.64.198.86 ip
45
 1 PL 2026-11-07 23:35 UTC 2026-11-07 23:35 UTC
172.64.198.16 ip
45
 1 PL 2026-11-07 23:35 UTC 2026-11-07 23:35 UTC
77.67.26.137 ip
39
 1 US 2026-11-07 23:21 UTC 2026-11-07 23:21 UTC

Showing 1-25 of 88277 indicators