IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.206.89.121 ip

Score
5
/100
raw: 0.52
Reports
174
Last Reported
2026-06-13 14:30 UTC
Categories
Scanning (174)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
BR

Threat Intelligence enriched 2026-11-04 17:08 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-13 14:29 UTC wp-login direct GET /wp-login.php scanner
2026-06-13 14:29 UTC wp-admin direct GET /wp-admin/network/plugins.php scanner
2026-06-13 14:29 UTC catch-all-cms direct GET /wp-links.php scanner
2026-06-13 14:29 UTC catch-all-script direct GET /el.php scanner
2026-06-13 14:29 UTC wp-login direct GET /wp-login.php scanner
2026-06-13 14:29 UTC wp-admin direct GET /wp-admin/css/colors/midnight/about.php scanner
2026-06-13 14:28 UTC catch-all-script direct GET /xstelth.php scanner
2026-06-13 14:28 UTC catch-all-script direct GET /waf.php scanner
2026-06-13 14:28 UTC catch-all-script direct GET /jj.php scanner
2026-06-13 14:28 UTC wp-login direct GET /wp-login.php scanner
2026-06-13 14:28 UTC wp-admin direct GET /wp-admin/css/colors/sunrise/ scanner
2026-06-13 14:28 UTC catch-all-script direct GET /ddd.php scanner
2026-06-13 14:28 UTC catch-all-cms direct GET //wp-includes/assets/ scanner
2026-06-13 14:27 UTC catch-all-script direct GET /w2025.php scanner
2026-06-13 14:27 UTC catch-all-script direct GET //xwpg.php scanner
2026-06-13 14:27 UTC catch-all-cms direct GET /wp-load.php scanner
2026-06-13 14:27 UTC catch-all-script direct GET /xa.php scanner
2026-06-13 14:27 UTC catch-all-script direct GET /f35.php scanner
2026-06-13 14:26 UTC catch-all-script direct GET /jp.php scanner
2026-06-13 14:26 UTC catch-all-script direct GET /no1.php scanner

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
103.141.64.141 ip
50
 1 BD 2026-11-09 15:12 UTC 2026-11-09 15:12 UTC
103.148.114.17 ip
50
 1 BD 2026-11-09 15:12 UTC 2026-11-09 15:12 UTC
223.185.57.139 ip
50
 1 IN 2026-11-09 15:12 UTC 2026-11-09 15:12 UTC
105.156.71.46 ip
55
 1 MA 2026-11-09 15:12 UTC 2026-11-09 15:12 UTC
193.218.179.72 ip
50
 1 IT 2026-11-09 15:11 UTC 2026-11-09 15:11 UTC
98.33.41.72 ip
50
 1 US 2026-11-09 15:11 UTC 2026-11-09 15:11 UTC
13.140.161.237 ip
100
 17 FR 2026-11-09 15:09 UTC 2026-11-09 15:09 UTC
176.98.21.169 ip
50
 1 UA 2026-11-09 15:08 UTC 2026-11-09 15:08 UTC
158.181.40.123 ip
50
 1 AZ 2026-11-09 15:08 UTC 2026-11-09 15:08 UTC
177.152.99.207 ip
50
 1 BR 2026-11-09 15:05 UTC 2026-11-09 15:05 UTC
110.137.84.130 ip
50
 1 ID 2026-11-09 15:05 UTC 2026-11-09 15:05 UTC
179.238.101.29 ip
50
 1 AR 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
196.207.227.111 ip
50
 1 SN 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
122.183.34.223 ip
50
 1 IN 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
177.240.103.244 ip
50
 1 MX 2026-11-09 15:04 UTC 2026-11-09 15:04 UTC
195.182.22.233 ip
50
 1 UA 2026-11-09 15:03 UTC 2026-11-09 15:03 UTC
189.216.195.134 ip
50
 1 MX 2026-11-09 15:01 UTC 2026-11-09 15:01 UTC
223.178.208.204 ip
50
 1 IN 2026-11-09 14:59 UTC 2026-11-09 14:59 UTC
152.203.67.55 ip
50
 1 CO 2026-11-09 14:58 UTC 2026-11-09 14:58 UTC
79.177.153.95 ip
50
 1 IL 2026-11-09 14:58 UTC 2026-11-09 14:58 UTC
207.81.161.21 ip
50
 1 CA 2026-11-09 14:57 UTC 2026-11-09 14:57 UTC
31.169.53.6 ip
100
 131 NO 2026-11-09 15:12 UTC 2026-11-09 14:54 UTC
103.87.24.103 ip
50
 1 IN 2026-11-09 14:54 UTC 2026-11-09 14:54 UTC
124.29.253.45 ip
50
 1 PK 2026-11-09 14:54 UTC 2026-11-09 14:54 UTC
200.138.46.149 ip
39
 1 AE 2026-11-09 14:52 UTC 2026-11-09 14:52 UTC

Showing 1-25 of 90265 indicators