IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 20.168.224.74 ip
Score
100
/100
raw: 205.67
Reports
28
Last Reported
2026-11-07 19:10 UTC
Categories
Scanning (21)
Config Exposure Probe (4)
Web Stack Probe (2)
Admin Panel Probe (1)
Network details
ASN
8075
Organization
Microsoft Corporation
Country
US
Threat Intelligence enriched 2026-11-07 19:08 UTC
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-07 19:09 UTC | catch-all-suspicious | direct | GET | /runtime-config.js | burst |
| 2026-11-07 19:09 UTC | catch-all-scan | direct | GET | /env.js | burst |
| 2026-11-07 19:09 UTC | catch-all-scan | direct | GET | /jolokia/list | burst |
| 2026-11-07 19:09 UTC | debug-panel | direct | GET | /_profiler/latest | |
| 2026-11-07 19:09 UTC | catch-all-script | direct | GET | /info.php | burst |
| 2026-11-07 19:09 UTC | phpmyadmin | direct | GET | /phpmyadmin/config.inc.php | burst |
| 2026-11-07 19:09 UTC | catch-all-suspicious | direct | GET | /META-INF/persistence.xml | burst |
| 2026-11-07 19:09 UTC | catch-all-suspicious | direct | GET | /config/config.js | burst |
| 2026-11-07 19:09 UTC | catch-all-scan | direct | GET | /.gradle/gradle.properties | burst |
| 2026-11-07 19:09 UTC | catch-all-suspicious | direct | GET | /swagger/v1/swagger.json | burst |
| 2026-11-07 19:09 UTC | docker-compose | direct | GET | /docker-compose.override.yml | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /sftp-config.json | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /client_secret.json | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /gcp-key.json | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /google-credentials.json | burst |
| 2026-11-07 19:08 UTC | catch-all-scan | direct | GET | /management/env | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /.kube/config | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /secrets.json | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /config.json | burst |
| 2026-11-07 19:08 UTC | catch-all-suspicious | direct | GET | /appsettings.Local.json | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 99.234.169.247 | ip |
39
|
1 | CA | 2026-11-07 19:56 UTC | 2026-11-07 19:56 UTC |
| 51.158.195.56 | ip |
39
|
1 | NL | 2026-11-07 19:55 UTC | 2026-11-07 19:55 UTC |
| 51.158.203.155 | ip |
91
|
4 | NL | 2026-11-07 19:55 UTC | 2026-11-07 19:55 UTC |
| 101.53.228.226 | ip |
50
|
1 | PK | 2026-11-07 19:55 UTC | 2026-11-07 19:55 UTC |
| 148.224.102.13 | ip |
39
|
1 | MX | 2026-11-07 19:54 UTC | 2026-11-07 19:54 UTC |
| 91.219.80.224 | ip |
50
|
1 | UA | 2026-11-07 19:53 UTC | 2026-11-07 19:53 UTC |
| 200.181.134.70 | ip |
50
|
1 | BR | 2026-11-07 19:53 UTC | 2026-11-07 19:53 UTC |
| 103.168.234.22 | ip |
50
|
1 | IN | 2026-11-07 19:52 UTC | 2026-11-07 19:52 UTC |
| 106.215.165.6 | ip |
39
|
1 | IN | 2026-11-07 19:52 UTC | 2026-11-07 19:52 UTC |
| 144.124.199.214 | ip |
39
|
1 | UZ | 2026-11-07 19:49 UTC | 2026-11-07 19:49 UTC |
| 196.64.2.237 | ip |
50
|
1 | MA | 2026-11-07 19:47 UTC | 2026-11-07 19:47 UTC |
| 130.43.62.118 | ip |
50
|
1 | GR | 2026-11-07 19:45 UTC | 2026-11-07 19:45 UTC |
| 39.15.10.166 | ip |
39
|
1 | TW | 2026-11-07 19:40 UTC | 2026-11-07 19:40 UTC |
| 103.100.234.167 | ip |
50
|
1 | BD | 2026-11-07 19:40 UTC | 2026-11-07 19:40 UTC |
| 103.137.80.80 | ip |
50
|
1 | BD | 2026-11-07 19:35 UTC | 2026-11-07 19:35 UTC |
| 186.189.92.240 | ip |
39
|
1 | CL | 2026-11-07 19:34 UTC | 2026-11-07 19:34 UTC |
| 117.5.152.195 | ip |
50
|
1 | VN | 2026-11-07 19:28 UTC | 2026-11-07 19:28 UTC |
| 187.243.204.145 | ip |
39
|
1 | MX | 2026-11-07 19:27 UTC | 2026-11-07 19:27 UTC |
| 45.4.105.221 | ip |
39
|
1 | BR | 2026-11-07 19:26 UTC | 2026-11-07 19:26 UTC |
| 102.98.72.18 | ip |
39
|
1 | MA | 2026-11-07 19:26 UTC | 2026-11-07 19:26 UTC |
| 175.141.179.217 | ip |
50
|
1 | MY | 2026-11-07 19:25 UTC | 2026-11-07 19:25 UTC |
| 188.239.238.193 | ip |
50
|
1 | UA | 2026-11-07 19:25 UTC | 2026-11-07 19:25 UTC |
| 31.43.49.115 | ip |
50
|
1 | UA | 2026-11-07 19:24 UTC | 2026-11-07 19:24 UTC |
| 103.146.149.51 | ip |
39
|
1 | NP | 2026-11-07 19:23 UTC | 2026-11-07 19:23 UTC |
| 209.178.158.12 | ip |
39
|
1 | MX | 2026-11-07 19:22 UTC | 2026-11-07 19:22 UTC |
Showing 1-25 of 88207 indicators