IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.169.236.213 ip

Score
100
/100
raw: 905.97
Reports
150
Last Reported
2026-11-12 11:59 UTC
Categories
Scanning (99) Web Stack Probe (45) Admin Panel Probe (6)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-12 11:37 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-12 11:58 UTC catch-all-script direct GET /file5.php
2026-11-12 11:58 UTC catch-all-script direct GET /p.php
2026-11-12 11:58 UTC catch-all-script direct GET /as.php
2026-11-12 11:58 UTC catch-all-admin direct GET /admin.php
2026-11-12 11:58 UTC catch-all-script direct GET /lock360.php
2026-11-12 11:58 UTC catch-all-cms direct GET /wp-admin.php
2026-11-12 11:57 UTC catch-all-script direct GET /bthil.php
2026-11-12 11:57 UTC catch-all-script direct GET //classwithtostring.php
2026-11-12 11:57 UTC catch-all-script direct GET /shell.php
2026-11-12 11:57 UTC wp-includes direct GET /wp-includes/index.php
2026-11-12 11:57 UTC wp-admin direct GET /wp-admin/css/
2026-11-12 11:57 UTC wp-admin direct GET /wp-admin/user/
2026-11-12 11:57 UTC catch-all-script direct GET /fm.php
2026-11-12 11:56 UTC wp-includes direct GET /wp-includes/js/codemirror/about.php
2026-11-12 11:56 UTC catch-all-script direct GET /images/index.php
2026-11-12 11:56 UTC catch-all-script direct GET /m.php
2026-11-12 11:56 UTC wp-admin direct GET /wp-admin/includes/
2026-11-12 11:56 UTC catch-all-script direct GET /.well-known/gecko-litespeed.php
2026-11-12 11:56 UTC catch-all-script direct GET /c99.php
2026-11-12 11:56 UTC catch-all-script direct GET /bypass.php

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
216.25.90.52 ip
39
 1 US 2026-11-12 12:20 UTC 2026-11-12 12:20 UTC
190.226.217.107 ip
50
 1 AR 2026-11-12 12:19 UTC 2026-11-12 12:19 UTC
122.173.40.221 ip
50
 1 IN 2026-11-12 12:19 UTC 2026-11-12 12:19 UTC
157.100.137.112 ip
50
 1 EC 2026-11-12 12:19 UTC 2026-11-12 12:19 UTC
168.149.82.203 ip
50
 1 SA 2026-11-12 12:19 UTC 2026-11-12 12:19 UTC
39.34.132.26 ip
50
 1 PK 2026-11-12 12:16 UTC 2026-11-12 12:16 UTC
41.143.15.173 ip
50
 1 MA 2026-11-12 12:16 UTC 2026-11-12 12:16 UTC
14.188.19.197 ip
39
 1 VN 2026-11-12 12:15 UTC 2026-11-12 12:15 UTC
38.183.52.127 ip
39
 1 IN 2026-11-12 12:15 UTC 2026-11-12 12:15 UTC
148.224.70.2 ip
39
 1 MX 2026-11-12 12:15 UTC 2026-11-12 12:15 UTC
103.236.107.140 ip
39
 1 BD 2026-11-12 12:15 UTC 2026-11-12 12:15 UTC
136.158.126.157 ip
50
 1 PH 2026-11-12 12:15 UTC 2026-11-12 12:15 UTC
181.188.15.166 ip
50
 1 TT 2026-11-12 12:13 UTC 2026-11-12 12:13 UTC
189.28.76.14 ip
39
 1 BO 2026-11-12 12:12 UTC 2026-11-12 12:12 UTC
201.33.72.158 ip
39
 1 BR 2026-11-12 12:12 UTC 2026-11-12 12:12 UTC
113.212.108.10 ip
39
 1 BD 2026-11-12 12:11 UTC 2026-11-12 12:11 UTC
161.142.158.61 ip
50
 1 MY 2026-11-12 12:11 UTC 2026-11-12 12:11 UTC
187.204.96.81 ip
50
 1 MX 2026-11-12 12:11 UTC 2026-11-12 12:11 UTC
144.16.223.235 ip
39
 1 IN 2026-11-12 12:11 UTC 2026-11-12 12:11 UTC
212.47.147.55 ip
39
 1 AZ 2026-11-12 12:11 UTC 2026-11-12 12:11 UTC
191.116.148.252 ip
39
 1 CL 2026-11-12 12:10 UTC 2026-11-12 12:10 UTC
172.105.64.62 ip
70
 2 DE 2026-11-12 12:12 UTC 2026-11-12 12:10 UTC
41.82.65.70 ip
39
 1 SN 2026-11-12 12:10 UTC 2026-11-12 12:10 UTC
103.135.254.251 ip
39
 1 BD 2026-11-12 12:09 UTC 2026-11-12 12:09 UTC
103.176.18.64 ip
39
 1 BD 2026-11-12 12:08 UTC 2026-11-12 12:08 UTC

Showing 1-25 of 96747 indicators