IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.226.66.230 ip

Score
97
/100
raw: 36.65
Reports
3046
Last Reported
2026-07-19 13:29 UTC
Categories
Scanning (3046)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
BR

Threat Intelligence enriched 2026-11-12 21:16 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-16 17:37 UTC catch-all-script direct GET /for.php scanner
2026-07-16 17:37 UTC catch-all-script direct GET /mg2.php scanner
2026-07-16 17:37 UTC catch-all-script direct GET /ah25.php scanner
2026-07-16 17:36 UTC catch-all-script direct GET /hg.php scanner
2026-07-16 17:36 UTC catch-all-script direct GET /e.php scanner
2026-07-16 17:36 UTC catch-all-script direct GET /son1.php scanner
2026-07-16 17:36 UTC catch-all-script direct GET /xiugai.php scanner
2026-07-16 17:36 UTC catch-all-script direct GET /pbck.php scanner
2026-07-16 17:36 UTC wp-includes direct GET /wp-includes/Requests/library/ scanner
2026-07-16 17:35 UTC catch-all-script direct GET /sh3ll.php scanner
2026-07-16 17:35 UTC catch-all-script direct GET /gecko.php scanner
2026-07-16 17:35 UTC catch-all-script direct GET /aaa.php scanner
2026-07-16 17:35 UTC wp-login direct GET /wp-login.php scanner
2026-07-16 17:35 UTC wp-admin direct GET /wp-admin/network/plugins.php scanner
2026-07-16 17:35 UTC catch-all-script direct GET /xstelth.php scanner
2026-07-16 17:35 UTC wp-login direct GET /wp-login.php scanner
2026-07-16 17:34 UTC wp-admin direct GET /wp-admin/css/colors/sunrise/ scanner
2026-07-16 17:34 UTC catch-all-cms direct GET //wp-includes/assets/ scanner
2026-07-16 17:34 UTC catch-all-script direct GET //xwpg.php scanner
2026-07-16 17:34 UTC catch-all-cms direct GET /wp-load.php scanner

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
102.159.208.249 ip
39
 1 TN 2026-11-13 20:11 UTC 2026-11-13 20:11 UTC
102.219.160.40 ip
39
 1 ZA 2026-11-13 20:11 UTC 2026-11-13 20:11 UTC
186.79.243.240 ip
39
 1 CL 2026-11-13 20:09 UTC 2026-11-13 20:09 UTC
74.244.135.162 ip
39
 1 AR 2026-11-13 20:09 UTC 2026-11-13 20:09 UTC
187.226.176.126 ip
50
 1 MX 2026-11-13 20:08 UTC 2026-11-13 20:08 UTC
52.56.187.65 ip
55
 1 GB 2026-11-13 20:08 UTC 2026-11-13 20:08 UTC
62.212.44.192 ip
50
 1 GE 2026-11-13 20:08 UTC 2026-11-13 20:08 UTC
170.81.88.136 ip
39
 1 BR 2026-11-13 20:07 UTC 2026-11-13 20:07 UTC
194.44.50.168 ip
50
 1 UA 2026-11-13 20:06 UTC 2026-11-13 20:06 UTC
177.130.138.221 ip
39
 1 BR 2026-11-13 20:06 UTC 2026-11-13 20:06 UTC
189.203.14.173 ip
39
 1 MX 2026-11-13 20:06 UTC 2026-11-13 20:06 UTC
181.127.68.20 ip
50
 1 PY 2026-11-13 20:05 UTC 2026-11-13 20:05 UTC
102.129.75.63 ip
50
 1 CG 2026-11-13 20:05 UTC 2026-11-13 20:05 UTC
45.187.99.148 ip
39
 1 BR 2026-11-13 20:04 UTC 2026-11-13 20:04 UTC
41.122.145.85 ip
50
 1 ZA 2026-11-13 20:04 UTC 2026-11-13 20:04 UTC
103.134.56.132 ip
50
 1 BD 2026-11-13 20:04 UTC 2026-11-13 20:04 UTC
200.118.80.12 ip
39
 1 CO 2026-11-13 20:04 UTC 2026-11-13 20:04 UTC
38.44.106.18 ip
50
 1 GB 2026-11-13 20:03 UTC 2026-11-13 20:03 UTC
190.95.126.206 ip
39
 1 CL 2026-11-13 20:02 UTC 2026-11-13 20:02 UTC
78.203.30.46 ip
50
 1 FR 2026-11-13 20:02 UTC 2026-11-13 20:02 UTC
187.250.112.129 ip
50
 1 MX 2026-11-13 20:01 UTC 2026-11-13 20:01 UTC
88.227.78.228 ip
39
 1 TR 2026-11-13 20:00 UTC 2026-11-13 20:00 UTC
84.237.185.197 ip
88
 3 LV 2026-11-13 19:59 UTC 2026-11-13 19:58 UTC
197.90.227.164 ip
39
 1 ZA 2026-11-13 19:57 UTC 2026-11-13 19:57 UTC
180.242.194.162 ip
50
 1 ID 2026-11-13 19:57 UTC 2026-11-13 19:57 UTC

Showing 1-25 of 99538 indicators