IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 20.226.33.200 ip
Score
9
/100
raw: 0.91
Reports
328
Last Reported
2026-06-11 19:50 UTC
Categories
Scanning (328)
Network details
ASN
8075
Organization
Microsoft Corporation
Country
BR
Threat Intelligence enriched 2026-11-04 16:01 UTC
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-11 19:50 UTC | catch-all-script | direct | GET | /berlin.php | scanner |
| 2026-06-11 19:50 UTC | wp-login | direct | GET | /wp-login.php | scanner |
| 2026-06-11 19:49 UTC | wp-admin | direct | GET | /wp-admin/network/plugins.php | scanner |
| 2026-06-11 19:49 UTC | catch-all-cms | direct | GET | /wp-links.php | scanner |
| 2026-06-11 19:49 UTC | catch-all-script | direct | GET | /file58.php | scanner |
| 2026-06-11 19:49 UTC | catch-all-script | direct | GET | /bel.php | scanner |
| 2026-06-11 19:49 UTC | wp-login | direct | GET | /wp-login.php | scanner |
| 2026-06-11 19:49 UTC | wp-admin | direct | GET | /wp-admin/css/colors/midnight/about.php | scanner |
| 2026-06-11 19:49 UTC | catch-all-script | direct | GET | /xstelth.php | scanner |
| 2026-06-11 19:48 UTC | catch-all-script | direct | GET | /waf.php | scanner |
| 2026-06-11 19:48 UTC | catch-all-script | direct | GET | /jj.php | scanner |
| 2026-06-11 19:48 UTC | wp-login | direct | GET | /wp-login.php | scanner |
| 2026-06-11 19:48 UTC | wp-admin | direct | GET | /wp-admin/css/colors/sunrise/ | scanner |
| 2026-06-11 19:48 UTC | catch-all-script | direct | GET | /ddd.php | scanner |
| 2026-06-11 19:48 UTC | catch-all-cms | direct | GET | //wp-includes/assets/ | scanner |
| 2026-06-11 19:48 UTC | catch-all-script | direct | GET | /w2025.php | scanner |
| 2026-06-11 19:47 UTC | catch-all-script | direct | GET | //xwpg.php | scanner |
| 2026-06-11 19:47 UTC | catch-all-cms | direct | GET | /wp-load.php | scanner |
| 2026-06-11 19:47 UTC | catch-all-script | direct | GET | /xa.php | scanner |
| 2026-06-11 19:47 UTC | catch-all-script | direct | GET | /f35.php | scanner |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 31.57.184.232 | ip |
18
|
1 | US | 2026-11-09 04:36 UTC | 2026-11-09 04:36 UTC |
| 189.203.98.12 | ip |
50
|
1 | MX | 2026-11-09 04:35 UTC | 2026-11-09 04:35 UTC |
| 202.164.135.173 | ip |
50
|
1 | IN | 2026-11-09 04:34 UTC | 2026-11-09 04:34 UTC |
| 187.189.95.185 | ip |
39
|
1 | MX | 2026-11-09 04:34 UTC | 2026-11-09 04:34 UTC |
| 149.109.75.228 | ip |
39
|
1 | SA | 2026-11-09 04:34 UTC | 2026-11-09 04:34 UTC |
| 189.6.16.67 | ip |
39
|
1 | BR | 2026-11-09 04:33 UTC | 2026-11-09 04:33 UTC |
| 5.51.53.167 | ip |
39
|
1 | FR | 2026-11-09 04:33 UTC | 2026-11-09 04:33 UTC |
| 115.133.214.151 | ip |
50
|
1 | MY | 2026-11-09 04:32 UTC | 2026-11-09 04:32 UTC |
| 180.190.222.7 | ip |
50
|
1 | PH | 2026-11-09 04:32 UTC | 2026-11-09 04:32 UTC |
| 103.113.149.48 | ip |
39
|
1 | BD | 2026-11-09 04:31 UTC | 2026-11-09 04:31 UTC |
| 49.144.106.146 | ip |
50
|
1 | PH | 2026-11-09 04:29 UTC | 2026-11-09 04:29 UTC |
| 200.83.152.119 | ip |
39
|
1 | CL | 2026-11-09 04:29 UTC | 2026-11-09 04:29 UTC |
| 61.6.153.203 | ip |
39
|
1 | MY | 2026-11-09 04:28 UTC | 2026-11-09 04:28 UTC |
| 187.182.131.253 | ip |
50
|
1 | BR | 2026-11-09 04:28 UTC | 2026-11-09 04:28 UTC |
| 5.164.254.8 | ip |
50
|
1 | RU | 2026-11-09 04:28 UTC | 2026-11-09 04:28 UTC |
| 201.145.147.4 | ip |
50
|
1 | MX | 2026-11-09 04:27 UTC | 2026-11-09 04:27 UTC |
| 177.236.72.225 | ip |
39
|
1 | MX | 2026-11-09 04:27 UTC | 2026-11-09 04:27 UTC |
| 45.87.144.36 | ip |
39
|
1 | RU | 2026-11-09 04:24 UTC | 2026-11-09 04:24 UTC |
| 178.234.135.45 | ip |
39
|
1 | RU | 2026-11-09 04:24 UTC | 2026-11-09 04:24 UTC |
| 190.90.221.178 | ip |
39
|
1 | CO | 2026-11-09 04:23 UTC | 2026-11-09 04:23 UTC |
| 103.73.107.167 | ip |
50
|
1 | BD | 2026-11-09 04:23 UTC | 2026-11-09 04:23 UTC |
| 213.222.233.150 | ip |
39
|
1 | RU | 2026-11-09 04:22 UTC | 2026-11-09 04:22 UTC |
| 103.184.56.57 | ip |
50
|
1 | ID | 2026-11-09 04:19 UTC | 2026-11-09 04:19 UTC |
| 27.125.246.224 | ip |
39
|
1 | MY | 2026-11-09 04:19 UTC | 2026-11-09 04:19 UTC |
| 190.48.26.244 | ip |
39
|
1 | AR | 2026-11-09 04:18 UTC | 2026-11-09 04:18 UTC |
Showing 1-25 of 89886 indicators