IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.65.93.74 ip

Score
100
/100
raw: 850.81
Reports
141
Last Reported
2026-11-12 13:00 UTC
Categories
Scanning (94) Web Stack Probe (41) Admin Panel Probe (6)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-12 12:40 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-12 12:59 UTC catch-all-script direct GET /file5.php
2026-11-12 12:59 UTC catch-all-script direct GET /p.php
2026-11-12 12:59 UTC catch-all-script direct GET /as.php
2026-11-12 12:59 UTC catch-all-admin direct GET /admin.php
2026-11-12 12:59 UTC catch-all-script direct GET /lock360.php
2026-11-12 12:59 UTC catch-all-cms direct GET /wp-admin.php
2026-11-12 12:58 UTC catch-all-script direct GET /bthil.php
2026-11-12 12:58 UTC catch-all-script direct GET //classwithtostring.php
2026-11-12 12:58 UTC catch-all-script direct GET /shell.php
2026-11-12 12:58 UTC wp-includes direct GET /wp-includes/index.php
2026-11-12 12:58 UTC wp-admin direct GET /wp-admin/css/
2026-11-12 12:58 UTC wp-admin direct GET /wp-admin/user/
2026-11-12 12:58 UTC catch-all-script direct GET /fm.php
2026-11-12 12:57 UTC wp-includes direct GET /wp-includes/js/codemirror/about.php
2026-11-12 12:57 UTC catch-all-script direct GET /images/index.php
2026-11-12 12:57 UTC catch-all-script direct GET /m.php
2026-11-12 12:57 UTC wp-admin direct GET /wp-admin/includes/
2026-11-12 12:57 UTC catch-all-script direct GET /.well-known/gecko-litespeed.php
2026-11-12 12:57 UTC catch-all-script direct GET /c99.php
2026-11-12 12:57 UTC catch-all-script direct GET /bypass.php

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
186.189.108.77 ip
50
 1 CL 2026-11-12 13:31 UTC 2026-11-12 13:31 UTC
175.145.218.28 ip
50
 1 MY 2026-11-12 13:31 UTC 2026-11-12 13:31 UTC
188.163.115.148 ip
50
 1 UA 2026-11-12 13:30 UTC 2026-11-12 13:30 UTC
41.72.211.64 ip
50
 1 KE 2026-11-12 13:29 UTC 2026-11-12 13:29 UTC
103.174.68.209 ip
39
 1 NP 2026-11-12 13:28 UTC 2026-11-12 13:28 UTC
103.177.253.102 ip
50
 1 IN 2026-11-12 13:28 UTC 2026-11-12 13:28 UTC
175.100.83.211 ip
50
 1 KH 2026-11-12 13:28 UTC 2026-11-12 13:28 UTC
125.235.231.235 ip
50
 1 VN 2026-11-12 13:25 UTC 2026-11-12 13:25 UTC
84.39.247.218 ip
50
 1 RU 2026-11-12 13:24 UTC 2026-11-12 13:24 UTC
178.151.100.194 ip
50
 1 UA 2026-11-12 13:24 UTC 2026-11-12 13:24 UTC
178.66.157.163 ip
50
 1 RU 2026-11-12 13:24 UTC 2026-11-12 13:24 UTC
117.96.41.225 ip
50
 1 IN 2026-11-12 13:24 UTC 2026-11-12 13:24 UTC
14.191.178.14 ip
50
 1 VN 2026-11-12 13:23 UTC 2026-11-12 13:23 UTC
223.181.34.101 ip
50
 1 IN 2026-11-12 13:22 UTC 2026-11-12 13:22 UTC
161.142.119.141 ip
50
 1 MY 2026-11-12 13:19 UTC 2026-11-12 13:19 UTC
123.20.170.58 ip
39
 1 VN 2026-11-12 13:18 UTC 2026-11-12 13:18 UTC
37.54.31.86 ip
39
 1 UA 2026-11-12 13:18 UTC 2026-11-12 13:18 UTC
196.189.121.132 ip
39
 1 ET 2026-11-12 13:17 UTC 2026-11-12 13:17 UTC
153.94.66.242 ip
39
 1 SA 2026-11-12 13:17 UTC 2026-11-12 13:17 UTC
103.181.181.154 ip
50
 1 BD 2026-11-12 13:17 UTC 2026-11-12 13:17 UTC
144.124.193.180 ip
50
 1 UZ 2026-11-12 13:17 UTC 2026-11-12 13:17 UTC
103.133.206.5 ip
50
 1 BD 2026-11-12 13:17 UTC 2026-11-12 13:17 UTC
186.60.140.10 ip
39
 1 AR 2026-11-12 13:16 UTC 2026-11-12 13:16 UTC
83.71.70.79 ip
50
 1 IE 2026-11-12 13:15 UTC 2026-11-12 13:15 UTC
187.156.243.138 ip
50
 1 MX 2026-11-12 13:13 UTC 2026-11-12 13:13 UTC

Showing 1-25 of 96869 indicators