IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.206.89.130 ip

Score
99
/100
raw: 47.06
Reports
3537
Last Reported
2026-07-20 16:52 UTC
Categories
Scanning (3537)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
BR

Threat Intelligence enriched 2026-11-12 22:06 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-20 16:52 UTC catch-all-script direct GET /dmin.php scanner
2026-07-20 16:52 UTC catch-all-script direct GET /norn.php scanner
2026-07-20 16:51 UTC catch-all-script direct GET /005.php scanner
2026-07-20 16:51 UTC catch-all-script direct GET /gk.php scanner
2026-07-20 16:51 UTC catch-all-script direct GET /qqqa.php scanner
2026-07-20 16:51 UTC catch-all-script direct GET /inx.php scanner
2026-07-20 16:51 UTC catch-all-script direct GET /file1221.php scanner
2026-07-20 16:51 UTC catch-all-script direct GET /xhar.php scanner
2026-07-20 16:50 UTC catch-all-script direct GET /up4.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /kir.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /82.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /dmin.php scanner burst
2026-07-20 16:50 UTC catch-all-admin direct GET /adminner.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /norn.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /ssh3ll.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /005.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /for.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /gk.php scanner burst
2026-07-20 16:50 UTC catch-all-script direct GET /e.php scanner burst
2026-07-20 16:49 UTC catch-all-script direct GET /qqqa.php scanner burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
144.79.184.11 ip
39
 1 BD 2026-11-13 21:38 UTC 2026-11-13 21:38 UTC
187.188.9.24 ip
50
 1 MX 2026-11-13 21:38 UTC 2026-11-13 21:38 UTC
69.181.166.45 ip
39
 1 US 2026-11-13 21:37 UTC 2026-11-13 21:37 UTC
177.87.55.141 ip
50
 1 BR 2026-11-13 21:37 UTC 2026-11-13 21:37 UTC
73.200.134.42 ip
50
 1 US 2026-11-13 21:37 UTC 2026-11-13 21:37 UTC
41.86.40.113 ip
39
 1 SC 2026-11-13 21:36 UTC 2026-11-13 21:36 UTC
83.137.51.53 ip
39
 1 RU 2026-11-13 21:35 UTC 2026-11-13 21:35 UTC
131.100.63.52 ip
39
 1 BR 2026-11-13 21:35 UTC 2026-11-13 21:35 UTC
179.127.146.137 ip
39
 1 BR 2026-11-13 21:35 UTC 2026-11-13 21:35 UTC
190.153.66.252 ip
39
 1 VE 2026-11-13 21:35 UTC 2026-11-13 21:35 UTC
41.250.110.94 ip
39
 1 MA 2026-11-13 21:35 UTC 2026-11-13 21:35 UTC
177.37.148.198 ip
39
 1 BR 2026-11-13 21:34 UTC 2026-11-13 21:34 UTC
95.104.243.50 ip
50
 1 RU 2026-11-13 21:33 UTC 2026-11-13 21:33 UTC
181.78.175.42 ip
39
 1 CO 2026-11-13 21:32 UTC 2026-11-13 21:32 UTC
103.7.120.74 ip
50
 1 BD 2026-11-13 21:31 UTC 2026-11-13 21:31 UTC
41.108.189.129 ip
39
 1 DZ 2026-11-13 21:30 UTC 2026-11-13 21:30 UTC
91.210.251.4 ip
39
 1 UA 2026-11-13 21:30 UTC 2026-11-13 21:30 UTC
38.13.13.249 ip
39
 1 US 2026-11-13 21:30 UTC 2026-11-13 21:30 UTC
27.125.244.64 ip
39
 1 MY 2026-11-13 21:29 UTC 2026-11-13 21:29 UTC
186.94.96.75 ip
39
 1 VE 2026-11-13 21:28 UTC 2026-11-13 21:28 UTC
195.26.18.197 ip
39
 1 UA 2026-11-13 21:28 UTC 2026-11-13 21:28 UTC
134.249.9.29 ip
50
 1 UA 2026-11-13 21:28 UTC 2026-11-13 21:28 UTC
178.209.90.140 ip
39
 1 RU 2026-11-13 21:27 UTC 2026-11-13 21:27 UTC
212.35.172.27 ip
50
 1 RU 2026-11-13 21:27 UTC 2026-11-13 21:27 UTC
24.232.155.130 ip
39
 1 AR 2026-11-13 21:26 UTC 2026-11-13 21:26 UTC

Showing 1-25 of 99737 indicators