IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 20.9.81.163 ip

Score
13
/100
raw: 1.35
Reports
863
Last Reported
2026-05-30 19:05 UTC
Categories
Scanning (863)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 05:11 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-30 19:05 UTC catch-all-scan direct GET /zXc0z scanner
2026-05-30 19:04 UTC catch-all-script direct GET /php.php scanner
2026-05-30 19:04 UTC catch-all-script direct GET /p.php scanner
2026-05-30 19:04 UTC catch-all-script direct GET /atomlib.php scanner
2026-05-30 19:04 UTC wp-login direct GET /wp-login.php scanner
2026-05-30 19:04 UTC wp-admin direct GET /wp-admin/classwithtostring.php scanner
2026-05-30 19:04 UTC catch-all-script direct GET /2.php scanner
2026-05-30 19:04 UTC catch-all-script direct GET /ww5.php scanner
2026-05-30 19:03 UTC wp-content direct GET /wp-content/ scanner
2026-05-30 19:03 UTC wp-login direct GET /wp-login.php scanner
2026-05-30 19:03 UTC wp-admin direct GET /wp-admin/css/colors/ectoplasm/ scanner
2026-05-30 19:03 UTC catch-all-suspicious direct GET /randkeyword.PhP7 scanner
2026-05-30 19:03 UTC catch-all-cms direct GET /wp-blink.php scanner
2026-05-30 19:03 UTC catch-all-script direct GET /k.php scanner
2026-05-30 19:03 UTC catch-all-script direct GET /wso.php scanner
2026-05-30 19:02 UTC wp-login direct GET /wp-login.php scanner
2026-05-30 19:02 UTC wp-admin direct GET /wp-admin/js/index.php scanner
2026-05-30 19:02 UTC catch-all-script direct GET /ncx.php scanner
2026-05-30 19:02 UTC catch-all-script direct GET /fone1.php scanner
2026-05-30 19:02 UTC catch-all-script direct GET /wpc.php scanner

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
188.68.36.28 ip
55
 1 DE 2026-11-06 06:44 UTC 2026-11-06 06:44 UTC
194.32.152.91 ip
50
 1 BE 2026-11-06 06:38 UTC 2026-11-06 06:38 UTC
161.120.214.221 ip
100
 48 CN 2026-11-06 06:44 UTC 2026-11-06 06:38 UTC
185.3.217.197 ip
50
 1 BE 2026-11-06 06:34 UTC 2026-11-06 06:34 UTC
59.125.102.142 ip
50
 1 TW 2026-11-06 06:22 UTC 2026-11-06 06:22 UTC
188.166.41.178 ip
70
 2 NL 2026-11-06 06:19 UTC 2026-11-06 06:19 UTC
45.156.129.136 ip
18
 1 PT 2026-11-06 06:18 UTC 2026-11-06 06:18 UTC
190.22.77.185 ip
63
 2 CL 2026-11-06 06:11 UTC 2026-11-06 06:11 UTC
178.86.154.184 ip
93
 4 SA 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
135.125.175.229 ip
50
 1 FR 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
88.162.218.236 ip
78
 3 FR 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
190.101.108.15 ip
78
 3 CL 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
180.75.237.243 ip
63
 2 MY 2026-11-06 06:09 UTC 2026-11-06 06:09 UTC
113.190.90.100 ip
98
 7 VN 2026-11-06 06:10 UTC 2026-11-06 06:09 UTC
216.180.246.18 ip
67
 2 US 2026-11-06 06:07 UTC 2026-11-06 06:07 UTC
158.172.143.117 ip
100
 20 ES 2026-11-06 06:09 UTC 2026-11-06 06:06 UTC
170.246.210.89 ip
100
 20 BR 2026-11-06 06:09 UTC 2026-11-06 06:06 UTC
187.84.165.189 ip
100
 20 BR 2026-11-06 06:09 UTC 2026-11-06 06:06 UTC
138.197.118.33 ip
18
 1 US 2026-11-06 06:03 UTC 2026-11-06 06:03 UTC
38.95.86.75 ip
86
 4 DO 2026-11-06 05:58 UTC 2026-11-06 05:58 UTC
84.54.70.48 ip
96
 5 UZ 2026-11-06 05:58 UTC 2026-11-06 05:58 UTC
49.43.1.102 ip
70
 2 IN 2026-11-06 05:58 UTC 2026-11-06 05:58 UTC
187.173.251.119 ip
100
 12 MX 2026-11-06 06:00 UTC 2026-11-06 05:58 UTC
45.172.184.77 ip
100
 13 CO 2026-11-06 06:00 UTC 2026-11-06 05:58 UTC
106.205.170.106 ip
100
 17 IN 2026-11-06 05:58 UTC 2026-11-06 05:56 UTC

Showing 1-25 of 87275 indicators