IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.119.103.2 ip

Score
1
/100
raw: 0.11
Reports
18
Last Reported
2026-06-13 14:38 UTC
Categories
Config Exposure Probe (14) Scanning (2) Admin Panel Probe (1) API Probe (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 17:08 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 18 events

Time (UTC) Trap Signal Method Path Flags
2026-06-13 14:38 UTC sql-dump direct GET /dump.sql burst
2026-06-13 14:38 UTC sql-dump direct GET /backup.sql burst
2026-06-13 14:38 UTC catch-all-config direct GET /.htpasswd burst
2026-06-13 14:38 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-13 14:38 UTC config-php direct GET /config.php burst
2026-06-13 14:38 UTC ds-store direct GET /.DS_Store burst
2026-06-13 14:38 UTC actuator direct GET /actuator/env burst
2026-06-13 14:38 UTC server-status direct GET /server-status burst
2026-06-13 14:38 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-13 14:38 UTC aws-creds direct GET /.aws/credentials burst
2026-06-13 14:38 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-13 14:38 UTC wp-config direct GET /wp-config.php burst
2026-06-13 14:37 UTC catch-all-config direct GET /.env.save burst
2026-06-13 14:37 UTC catch-all-config direct GET /.env.backup burst
2026-06-13 14:37 UTC catch-all-config direct GET /.env.production
2026-06-13 14:37 UTC catch-all-config direct GET /.env.local
2026-06-13 14:37 UTC dot-env direct GET /.env
2026-06-13 14:37 UTC git-config direct GET /.git/config

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
193.218.179.72 ip
50
 1 IT 2026-11-09 15:11 UTC 2026-11-09 15:11 UTC
98.33.41.72 ip
50
 1 US 2026-11-09 15:11 UTC 2026-11-09 15:11 UTC
13.140.161.237 ip
100
 17 FR 2026-11-09 15:09 UTC 2026-11-09 15:09 UTC
176.98.21.169 ip
50
 1 UA 2026-11-09 15:08 UTC 2026-11-09 15:08 UTC
158.181.40.123 ip
50
 1 AZ 2026-11-09 15:08 UTC 2026-11-09 15:08 UTC
177.152.99.207 ip
50
 1 BR 2026-11-09 15:05 UTC 2026-11-09 15:05 UTC
110.137.84.130 ip
50
 1 ID 2026-11-09 15:05 UTC 2026-11-09 15:05 UTC
179.238.101.29 ip
50
 1 AR 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
196.207.227.111 ip
50
 1 SN 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
122.183.34.223 ip
50
 1 IN 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
177.240.103.244 ip
50
 1 MX 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
195.182.22.233 ip
50
 1 UA 2026-11-09 15:03 UTC 2026-11-09 15:03 UTC
189.216.195.134 ip
50
 1 MX 2026-11-09 15:01 UTC 2026-11-09 15:01 UTC
223.178.208.204 ip
50
 1 IN 2026-11-09 14:59 UTC 2026-11-09 14:59 UTC
152.203.67.55 ip
50
 1 CO 2026-11-09 14:58 UTC 2026-11-09 14:58 UTC
79.177.153.95 ip
50
 1 IL 2026-11-09 14:58 UTC 2026-11-09 14:58 UTC
207.81.161.21 ip
50
 1 CA 2026-11-09 14:57 UTC 2026-11-09 14:57 UTC
31.169.53.6 ip
100
 127 NO 2026-11-09 15:11 UTC 2026-11-09 14:54 UTC
103.87.24.103 ip
50
 1 IN 2026-11-09 14:54 UTC 2026-11-09 14:54 UTC
124.29.253.45 ip
50
 1 PK 2026-11-09 14:54 UTC 2026-11-09 14:54 UTC
200.138.46.149 ip
39
 1 AE 2026-11-09 14:52 UTC 2026-11-09 14:52 UTC
106.192.132.191 ip
50
 1 IN 2026-11-09 14:51 UTC 2026-11-09 14:51 UTC
190.24.143.44 ip
50
 1 CO 2026-11-09 14:50 UTC 2026-11-09 14:50 UTC
193.39.118.211 ip
50
 1 UA 2026-11-09 14:50 UTC 2026-11-09 14:50 UTC
122.183.49.19 ip
50
 1 IN 2026-11-09 14:49 UTC 2026-11-09 14:49 UTC

Showing 1-25 of 90261 indicators