IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 20.84.47.42 ip
Score
0
/100
raw: 0.04
Reports
10
Last Reported
2026-06-02 17:24 UTC
Categories
Config Exposure Probe (6)
Scanning (1)
Admin Panel Probe (1)
API Probe (1)
Credential Stuffing (1)
Network details
ASN
8075
Organization
Microsoft Corporation
Country
US
Threat Intelligence enriched 2026-11-04 10:11 UTC
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-02 17:24 UTC | catch-all-scan | direct | POST | /___proxy_subdomain_whm/login/ | burst creds |
| 2026-06-02 17:23 UTC | catch-all-config | direct | GET | /.htpasswd | burst |
| 2026-06-02 17:23 UTC | actuator | direct | GET | /actuator/env | burst |
| 2026-06-02 17:23 UTC | server-status | direct | GET | /server-status | burst |
| 2026-06-02 17:23 UTC | catch-all-script | direct | GET | /phpinfo.php | burst |
| 2026-06-02 17:23 UTC | catch-all-config | direct | GET | /.env.backup | burst |
| 2026-06-02 17:23 UTC | catch-all-config | direct | GET | /.env.production | |
| 2026-06-02 17:23 UTC | catch-all-config | direct | GET | /.env.local | |
| 2026-06-02 17:23 UTC | git-config | direct | GET | /.git/config | |
| 2026-06-02 17:23 UTC | git-head | direct | GET | /.git/HEAD |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 4.168.232.22 | ip |
63
|
3 | ZA | 2026-11-08 04:10 UTC | 2026-11-08 04:10 UTC |
| 34.38.19.77 | ip |
100
|
120 | BE | 2026-11-08 04:09 UTC | 2026-11-08 04:09 UTC |
| 2.59.133.33 | ip |
45
|
1 | DE | 2026-11-08 04:07 UTC | 2026-11-08 04:07 UTC |
| 34.22.173.23 | ip |
100
|
120 | BE | 2026-11-08 04:06 UTC | 2026-11-08 04:06 UTC |
| 34.64.254.96 | ip |
100
|
106 | KR | 2026-11-08 04:05 UTC | 2026-11-08 04:04 UTC |
| 170.246.209.116 | ip |
39
|
1 | BR | 2026-11-08 03:55 UTC | 2026-11-08 03:55 UTC |
| 2.49.64.94 | ip |
39
|
1 | AE | 2026-11-08 03:55 UTC | 2026-11-08 03:55 UTC |
| 172.64.200.155 | ip |
45
|
1 | PL | 2026-11-08 03:44 UTC | 2026-11-08 03:44 UTC |
| 172.64.200.73 | ip |
45
|
1 | PL | 2026-11-08 03:44 UTC | 2026-11-08 03:44 UTC |
| 217.160.229.231 | ip |
75
|
2 | ES | 2026-11-08 03:38 UTC | 2026-11-08 03:38 UTC |
| 188.135.21.222 | ip |
39
|
1 | OM | 2026-11-08 03:21 UTC | 2026-11-08 03:21 UTC |
| 51.81.169.200 | ip |
18
|
1 | US | 2026-11-08 02:59 UTC | 2026-11-08 02:59 UTC |
| 217.199.254.209 | ip |
45
|
1 | RU | 2026-11-08 02:51 UTC | 2026-11-08 02:51 UTC |
| 172.64.200.170 | ip |
45
|
1 | PL | 2026-11-08 02:29 UTC | 2026-11-08 02:29 UTC |
| 172.64.200.207 | ip |
45
|
1 | PL | 2026-11-08 02:29 UTC | 2026-11-08 02:29 UTC |
| 196.196.160.48 | ip |
50
|
1 | IT | 2026-11-08 02:20 UTC | 2026-11-08 02:20 UTC |
| 140.235.0.16 | ip |
39
|
1 | US | 2026-11-08 01:43 UTC | 2026-11-08 01:43 UTC |
| 31.77.219.53 | ip |
99
|
6 | DE | 2026-11-08 01:40 UTC | 2026-11-08 01:39 UTC |
| 89.116.122.22 | ip |
45
|
1 | IN | 2026-11-08 01:33 UTC | 2026-11-08 01:33 UTC |
| 165.140.238.132 | ip |
45
|
1 | US | 2026-11-08 01:13 UTC | 2026-11-08 01:13 UTC |
| 206.189.31.125 | ip |
45
|
1 | GB | 2026-11-08 01:12 UTC | 2026-11-08 01:12 UTC |
| 66.163.114.126 | ip |
39
|
1 | US | 2026-11-08 00:54 UTC | 2026-11-08 00:54 UTC |
| 134.209.119.162 | ip |
94
|
4 | US | 2026-11-08 00:40 UTC | 2026-11-08 00:40 UTC |
| 195.178.110.78 | ip |
100
|
17 | BG | 2026-11-08 02:33 UTC | 2026-11-08 00:36 UTC |
| 162.158.102.132 | ip |
45
|
1 | PL | 2026-11-08 00:23 UTC | 2026-11-08 00:23 UTC |
Showing 1-25 of 88287 indicators