IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 20.87.239.85 ip
Score
21
/100
raw: 2.37
Reports
25
Last Reported
2026-08-23 22:10 UTC
Categories
Web Stack Probe (20)
Scanning (3)
API Probe (2)
Network details
ASN
8075
Organization
Microsoft Corporation
Country
ZA
Threat Intelligence enriched 2026-05-13 01:04 UTC
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-08-23 20:06 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-23 19:53 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-18 01:37 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-17 13:48 UTC | wp-json | direct | GET | /wp-json/wp/v2/posts | |
| 2026-08-17 11:51 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-17 07:46 UTC | catch-all-suspicious | direct | GET | /sitemap_index.xml | |
| 2026-08-08 02:53 UTC | catch-all-suspicious | direct | GET | /sitemap_index.xml | |
| 2026-08-08 00:28 UTC | wp-json | direct | GET | /wp-json/rankmath/v1/getHead | |
| 2026-07-21 21:51 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-07-21 20:29 UTC | graphql | direct | POST | /graphql | |
| 2026-05-13 01:03 UTC | wp-json | direct | GET | /wp-json/webmention/1.0 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 190.4.127.80 | ip |
39
|
1 | AR | 2026-11-02 21:59 UTC | 2026-11-02 21:59 UTC |
| 179.1.199.154 | ip |
50
|
1 | CO | 2026-11-02 21:59 UTC | 2026-11-02 21:59 UTC |
| 174.138.190.126 | ip |
55
|
1 | US | 2026-11-02 21:59 UTC | 2026-11-02 21:59 UTC |
| 37.114.149.27 | ip |
50
|
1 | AZ | 2026-11-02 21:57 UTC | 2026-11-02 21:57 UTC |
| 210.195.165.73 | ip |
39
|
1 | MY | 2026-11-02 21:57 UTC | 2026-11-02 21:57 UTC |
| 189.217.20.215 | ip |
39
|
1 | MX | 2026-11-02 21:57 UTC | 2026-11-02 21:57 UTC |
| 190.60.46.246 | ip |
39
|
1 | CO | 2026-11-02 21:56 UTC | 2026-11-02 21:56 UTC |
| 37.18.25.111 | ip |
50
|
1 | RU | 2026-11-02 21:56 UTC | 2026-11-02 21:56 UTC |
| 181.23.23.250 | ip |
50
|
1 | AR | 2026-11-02 21:56 UTC | 2026-11-02 21:56 UTC |
| 177.245.215.116 | ip |
39
|
1 | MX | 2026-11-02 21:56 UTC | 2026-11-02 21:56 UTC |
| 102.178.175.34 | ip |
50
|
1 | BF | 2026-11-02 21:56 UTC | 2026-11-02 21:56 UTC |
| 197.221.126.20 | ip |
39
|
1 | ZA | 2026-11-02 21:56 UTC | 2026-11-02 21:56 UTC |
| 87.196.97.70 | ip |
50
|
1 | PT | 2026-11-02 21:55 UTC | 2026-11-02 21:55 UTC |
| 88.168.236.106 | ip |
39
|
1 | FR | 2026-11-02 21:54 UTC | 2026-11-02 21:54 UTC |
| 181.118.35.123 | ip |
39
|
1 | TT | 2026-11-02 21:54 UTC | 2026-11-02 21:54 UTC |
| 189.171.218.221 | ip |
50
|
1 | MX | 2026-11-02 21:54 UTC | 2026-11-02 21:54 UTC |
| 45.238.251.112 | ip |
50
|
1 | AR | 2026-11-02 21:53 UTC | 2026-11-02 21:53 UTC |
| 179.60.143.153 | ip |
50
|
1 | BR | 2026-11-02 21:51 UTC | 2026-11-02 21:51 UTC |
| 186.130.48.33 | ip |
39
|
1 | AR | 2026-11-02 21:51 UTC | 2026-11-02 21:51 UTC |
| 178.210.226.177 | ip |
39
|
1 | IQ | 2026-11-02 21:51 UTC | 2026-11-02 21:51 UTC |
| 187.190.184.108 | ip |
50
|
1 | MX | 2026-11-02 21:50 UTC | 2026-11-02 21:50 UTC |
| 117.176.126.138 | ip |
50
|
1 | CN | 2026-11-02 21:49 UTC | 2026-11-02 21:49 UTC |
| 179.51.111.187 | ip |
39
|
1 | CO | 2026-11-02 21:49 UTC | 2026-11-02 21:49 UTC |
| 212.90.62.9 | ip |
50
|
1 | UA | 2026-11-02 21:49 UTC | 2026-11-02 21:49 UTC |
| 173.33.2.192 | ip |
50
|
1 | CA | 2026-11-02 21:49 UTC | 2026-11-02 21:49 UTC |
Showing 1-25 of 84875 indicators