IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.9.55.237 ip

Score
6
/100
raw: 0.66
Reports
504
Last Reported
2026-05-24 03:54 UTC
Categories
Scanning (504)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 05:10 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-24 03:53 UTC catch-all-script direct GET /xx.php scanner
2026-05-24 03:53 UTC catch-all-script direct GET /plugins.php scanner
2026-05-24 03:53 UTC catch-all-script direct GET /NewFile.php scanner
2026-05-24 03:53 UTC catch-all-script direct GET /wi.php scanner
2026-05-24 03:52 UTC catch-all-script direct GET /content.php scanner
2026-05-24 03:52 UTC catch-all-script direct GET /system.php scanner
2026-05-24 03:52 UTC catch-all-script direct GET /index.php scanner
2026-05-24 03:52 UTC config-php direct GET /config.php scanner
2026-05-24 03:52 UTC catch-all-script direct GET /new.php scanner
2026-05-24 03:52 UTC catch-all-script direct GET /gecko-new.php scanner
2026-05-24 03:51 UTC wp-content direct GET /wp-content/plugins/WordPressCore/ scanner
2026-05-24 03:51 UTC wp-includes direct GET /wp-includes/PHPMailer/ scanner
2026-05-24 03:51 UTC wp-content direct GET /wp-content/plugins/index.php scanner
2026-05-24 03:51 UTC wp-content direct GET /wp-content/themes/index.php scanner
2026-05-24 03:51 UTC wp-login direct GET /wp-login.php scanner
2026-05-24 03:51 UTC wp-admin direct GET /wp-admin/css/colors/ectoplasm/ scanner
2026-05-24 03:50 UTC wp-includes direct GET /wp-includes/Requests/src/Response/about.php scanner
2026-05-24 03:50 UTC uploads direct GET /uploads/ scanner
2026-05-24 03:50 UTC catch-all-suspicious direct GET /cgi-bin/ scanner
2026-05-24 03:50 UTC catch-all-script direct GET /13.php scanner

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
213.177.179.109 ip
88
 3 IR 2026-11-06 05:08 UTC 2026-11-06 05:08 UTC
35.210.150.149 ip
33
 1 BE 2026-11-06 04:56 UTC 2026-11-06 04:56 UTC
151.115.86.14 ip
33
 2 PL 2026-11-06 04:51 UTC 2026-11-06 04:50 UTC
103.4.251.237 ip
99
 7 US 2026-11-06 04:41 UTC 2026-11-06 04:41 UTC
167.71.37.56 ip
18
 1 DE 2026-11-06 04:41 UTC 2026-11-06 04:41 UTC
103.151.47.90 ip
18
 1 PK 2026-11-06 04:40 UTC 2026-11-06 04:40 UTC
129.226.77.115 ip
100
 6 HK 2026-11-06 04:39 UTC 2026-11-06 04:39 UTC
161.120.218.45 ip
100
 163 CN 2026-11-06 04:55 UTC 2026-11-06 04:34 UTC
85.120.226.28 ip
78
 3 RO 2026-11-06 04:27 UTC 2026-11-06 04:27 UTC
158.173.154.181 ip
75
 2 DE 2026-11-06 04:14 UTC 2026-11-06 04:14 UTC
23.234.72.51 ip
98
 6 US 2026-11-06 04:12 UTC 2026-11-06 04:09 UTC
173.46.91.238 ip
83
 3 US 2026-11-06 04:09 UTC 2026-11-06 04:09 UTC
45.169.79.15 ip
39
 1 BR 2026-11-06 04:09 UTC 2026-11-06 04:09 UTC
211.21.61.246 ip
50
 1 TW 2026-11-06 04:08 UTC 2026-11-06 04:08 UTC
94.130.68.183 ip
50
 1 DE 2026-11-06 04:08 UTC 2026-11-06 04:08 UTC
94.158.62.136 ip
39
 1 UZ 2026-11-06 04:04 UTC 2026-11-06 04:04 UTC
38.51.28.137 ip
39
 1 AR 2026-11-06 03:53 UTC 2026-11-06 03:53 UTC
49.51.193.153 ip
100
 159 US 2026-11-06 04:15 UTC 2026-11-06 03:48 UTC
31.97.135.129 ip
50
 1 US 2026-11-06 03:42 UTC 2026-11-06 03:42 UTC
103.179.240.151 ip
39
 1 PK 2026-11-06 03:35 UTC 2026-11-06 03:35 UTC
49.194.196.40 ip
39
 1 AU 2026-11-06 03:18 UTC 2026-11-06 03:18 UTC
216.25.90.84 ip
63
 2 US 2026-11-06 03:11 UTC 2026-11-06 03:10 UTC
187.180.148.21 ip
39
 1 BR 2026-11-06 03:04 UTC 2026-11-06 03:04 UTC
35.210.174.30 ip
55
 2 BE 2026-11-06 03:04 UTC 2026-11-06 03:04 UTC
177.226.179.112 ip
39
 1 MX 2026-11-06 03:01 UTC 2026-11-06 03:01 UTC

Showing 1-25 of 87245 indicators