IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.41.96.96 ip

Score
20
/100
raw: 2.28
Reports
317
Last Reported
2026-07-03 20:04 UTC
Categories
Scanning (317)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
KR

Threat Intelligence enriched 2026-11-05 08:11 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-03 20:03 UTC catch-all-script direct GET /sql.php scanner
2026-07-03 20:03 UTC wp-includes direct GET /wp-includes/Text/Diff/Engine/about.php scanner
2026-07-03 20:02 UTC catch-all-script direct GET /wander.php scanner
2026-07-03 20:02 UTC catch-all-script direct GET /ssla.php scanner
2026-07-03 20:02 UTC catch-all-script direct GET /file5.php scanner
2026-07-03 20:02 UTC catch-all-script direct GET /file6.php scanner
2026-07-03 20:02 UTC wp-content direct GET /wp-content/themes/admin.php scanner
2026-07-03 20:02 UTC catch-all-script direct GET /wpxml.php scanner
2026-07-03 20:02 UTC wp-login direct GET /wp-login.php scanner
2026-07-03 20:01 UTC wp-admin direct GET /wp-admin/doc.php scanner
2026-07-03 20:01 UTC catch-all-script direct GET /bless18.php scanner
2026-07-03 20:01 UTC catch-all-cms direct GET /wp-lvminl.php scanner
2026-07-03 20:01 UTC catch-all-script direct GET /scxy.php scanner
2026-07-03 20:01 UTC catch-all-script direct GET /xSx.php scanner
2026-07-03 20:01 UTC catch-all-script direct GET //btx25.php scanner
2026-07-03 20:01 UTC catch-all-script direct GET /mac.php scanner
2026-07-03 20:00 UTC catch-all-script direct GET //edit.php scanner
2026-07-03 20:00 UTC catch-all-script direct GET /qlex1.php scanner
2026-07-03 20:00 UTC catch-all-script direct GET /dx.php scanner
2026-07-03 20:00 UTC catch-all-cms direct GET /wp-asudo.php scanner

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
170.254.133.8 ip
39
 1 BR 2026-11-12 07:48 UTC 2026-11-12 07:48 UTC
170.150.157.31 ip
50
 1 CL 2026-11-12 07:48 UTC 2026-11-12 07:48 UTC
203.76.222.155 ip
50
 1 BD 2026-11-12 07:48 UTC 2026-11-12 07:48 UTC
196.3.215.174 ip
39
 1 BB 2026-11-12 07:48 UTC 2026-11-12 07:48 UTC
189.124.14.50 ip
39
 1 BR 2026-11-12 07:48 UTC 2026-11-12 07:48 UTC
38.190.28.131 ip
50
 1 BR 2026-11-12 07:48 UTC 2026-11-12 07:48 UTC
89.245.26.135 ip
50
 1 DE 2026-11-12 07:47 UTC 2026-11-12 07:47 UTC
27.145.122.220 ip
39
 1 TH 2026-11-12 07:46 UTC 2026-11-12 07:46 UTC
200.112.3.44 ip
39
 1 CL 2026-11-12 07:46 UTC 2026-11-12 07:46 UTC
103.70.171.40 ip
39
 1 BD 2026-11-12 07:45 UTC 2026-11-12 07:45 UTC
160.178.6.54 ip
50
 1 MA 2026-11-12 07:45 UTC 2026-11-12 07:45 UTC
144.124.193.68 ip
50
 1 UZ 2026-11-12 07:45 UTC 2026-11-12 07:45 UTC
196.190.51.73 ip
50
 1 ET 2026-11-12 07:45 UTC 2026-11-12 07:45 UTC
200.55.85.202 ip
50
 1 AR 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
76.101.159.204 ip
50
 1 US 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
73.183.202.53 ip
39
 1 US 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
82.59.53.154 ip
50
 1 IT 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
81.127.85.150 ip
50
 1 IT 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
73.111.65.133 ip
50
 1 US 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
129.222.163.246 ip
50
 1 US 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
46.98.105.111 ip
39
 1 UA 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
37.54.61.187 ip
39
 1 UA 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
128.79.80.30 ip
39
 1 FR 2026-11-12 07:44 UTC 2026-11-12 07:44 UTC
110.172.24.147 ip
39
 1 IN 2026-11-12 07:43 UTC 2026-11-12 07:43 UTC
91.198.101.236 ip
39
 1 KZ 2026-11-12 07:43 UTC 2026-11-12 07:43 UTC

Showing 1-25 of 96196 indicators