IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.85.229.140 ip

Score
100
/100
raw: 133.71
Reports
19
Last Reported
2026-11-05 01:04 UTC
Categories
Scanning (11) Config Exposure Probe (6) Admin Panel Probe (2)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 01:02 UTC

DNSBL Status
Clean

Sensor Activity last 19 events

Time (UTC) Trap Signal Method Path Flags
2026-11-05 01:04 UTC debug-panel direct GET /__debug__/ burst
2026-11-05 01:04 UTC debug-panel direct GET /_profiler burst
2026-11-05 01:03 UTC catch-all-backup direct GET /appsettings.json.bak burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /acme.json burst
2026-11-05 01:03 UTC catch-all-framework direct GET /composer/auth.json burst
2026-11-05 01:03 UTC catch-all-scan direct GET /wrangler.toml burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /application-production.yml burst
2026-11-05 01:03 UTC catch-all-script direct GET /config/services.php burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /settings.xml
2026-11-05 01:03 UTC docker-compose direct GET /docker-compose.override.yml
2026-11-05 01:03 UTC catch-all-config direct GET /storage/.env
2026-11-05 01:03 UTC catch-all-config direct GET /.env.production.local
2026-11-05 01:02 UTC catch-all-suspicious direct GET /error.log
2026-11-05 01:02 UTC catch-all-suspicious direct GET /secret.json
2026-11-05 01:02 UTC catch-all-suspicious direct GET /application-prod.yml
2026-11-05 01:02 UTC catch-all-suspicious direct GET /config/secrets.yml
2026-11-05 01:02 UTC wp-config-backup direct GET /wp-config.php.save
2026-11-05 01:02 UTC catch-all-config direct GET /laravel/.env
2026-11-05 01:01 UTC catch-all-config direct GET /.env.swp

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
77.67.26.25 ip
39
 1 US 2026-11-05 01:49 UTC 2026-11-05 01:49 UTC
165.22.240.90 ip
100
 35 SG 2026-11-05 01:41 UTC 2026-11-05 01:39 UTC
186.57.236.224 ip
39
 1 AR 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
42.118.186.203 ip
39
 1 VN 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
49.42.66.57 ip
39
 1 IN 2026-11-05 01:38 UTC 2026-11-05 01:38 UTC
193.32.249.165 ip
89
 3 NL 2026-11-05 01:38 UTC 2026-11-05 01:37 UTC
162.158.103.223 ip
75
 2 PL 2026-11-05 01:24 UTC 2026-11-05 01:24 UTC
5.183.255.21 ip
50
 1 RU 2026-11-05 01:20 UTC 2026-11-05 01:20 UTC
38.137.31.139 ip
39
 1 IN 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
85.237.212.66 ip
55
 1 PL 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
190.114.37.185 ip
39
 1 CL 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
34.152.62.86 ip
100
 71 CA 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
61.1.132.175 ip
39
 1 IN 2026-11-05 01:05 UTC 2026-11-05 01:05 UTC
52.234.179.110 ip
100
 16 US 2026-11-05 01:04 UTC 2026-11-05 01:03 UTC
40.114.65.242 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.85.229.140 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.169.215.72 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.121.19.44 ip
100
 13 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.64.193 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.191.88.112 ip
100
 21 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.161.125 ip
100
 20 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
104.211.60.75 ip
100
 15 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.50.172 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.38.40 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
201.79.97.215 ip
99
 7 SG 2026-11-05 00:53 UTC 2026-11-05 00:52 UTC

Showing 1-25 of 86838 indicators