IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 68.220.56.240 ip

Score
1
/100
raw: 0.09
Reports
17
Last Reported
2026-07-06 20:29 UTC
Categories
Config Exposure Probe (9) Scanning (4) Credential Stuffing (2) API Probe (1) Web Stack Probe (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 10:09 UTC

DNSBL Status
Clean

Sensor Activity last 15 events

Time (UTC) Trap Signal Method Path Flags
2026-07-06 20:29 UTC catch-all-cms direct POST /wp/wp-login.php creds
2026-07-06 20:28 UTC catch-all-cms direct GET /wp/wp-login.php
2026-06-02 10:52 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-02 10:52 UTC sql-dump direct GET /dump.sql burst
2026-06-02 10:52 UTC catch-all-config direct GET /.htpasswd burst
2026-06-02 10:51 UTC config-php direct GET /config.php burst
2026-06-02 10:51 UTC actuator direct GET /actuator/env burst
2026-06-02 10:51 UTC catch-all-script direct GET /phpinfo.php burst
2026-06-02 10:51 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-02 10:51 UTC aws-creds direct GET /.aws/credentials burst
2026-06-02 10:51 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-02 10:51 UTC wp-config direct GET /wp-config.php
2026-06-02 10:51 UTC catch-all-config direct GET /.env.local
2026-06-02 10:51 UTC dot-env direct GET /.env
2026-06-02 10:51 UTC git-config direct GET /.git/config

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
172.64.200.170 ip
45
 1 PL 2026-11-08 02:29 UTC 2026-11-08 02:29 UTC
172.64.200.207 ip
45
 1 PL 2026-11-08 02:29 UTC 2026-11-08 02:29 UTC
196.196.160.48 ip
50
 1 IT 2026-11-08 02:20 UTC 2026-11-08 02:20 UTC
140.235.0.16 ip
39
 1 US 2026-11-08 01:43 UTC 2026-11-08 01:43 UTC
31.77.219.53 ip
99
 6 DE 2026-11-08 01:40 UTC 2026-11-08 01:39 UTC
89.116.122.22 ip
45
 1 IN 2026-11-08 01:33 UTC 2026-11-08 01:33 UTC
165.140.238.132 ip
45
 1 US 2026-11-08 01:13 UTC 2026-11-08 01:13 UTC
206.189.31.125 ip
45
 1 GB 2026-11-08 01:12 UTC 2026-11-08 01:12 UTC
66.163.114.126 ip
39
 1 US 2026-11-08 00:54 UTC 2026-11-08 00:54 UTC
134.209.119.162 ip
94
 4 US 2026-11-08 00:40 UTC 2026-11-08 00:40 UTC
195.178.110.78 ip
100
 17 BG 2026-11-08 02:33 UTC 2026-11-08 00:36 UTC
162.158.102.132 ip
45
 1 PL 2026-11-08 00:23 UTC 2026-11-08 00:23 UTC
162.158.102.133 ip
45
 1 PL 2026-11-08 00:23 UTC 2026-11-08 00:23 UTC
115.129.129.35 ip
70
 2 AU 2026-11-08 00:17 UTC 2026-11-08 00:17 UTC
34.62.254.152 ip
100
 121 BE 2026-11-08 00:16 UTC 2026-11-08 00:16 UTC
34.22.196.121 ip
100
 120 BE 2026-11-08 00:12 UTC 2026-11-08 00:11 UTC
200.138.46.116 ip
39
 1 AE 2026-11-08 00:07 UTC 2026-11-08 00:07 UTC
102.133.224.63 ip
100
 382 ZA 2026-11-08 01:31 UTC 2026-11-08 00:05 UTC
43.155.169.154 ip
100
 326 KR 2026-11-08 00:22 UTC 2026-11-07 23:59 UTC
172.64.198.86 ip
45
 1 PL 2026-11-07 23:35 UTC 2026-11-07 23:35 UTC
172.64.198.16 ip
45
 1 PL 2026-11-07 23:35 UTC 2026-11-07 23:35 UTC
77.67.26.137 ip
39
 1 US 2026-11-07 23:21 UTC 2026-11-07 23:21 UTC
172.68.159.133 ip
75
 2 PL 2026-11-07 22:54 UTC 2026-11-07 22:54 UTC
34.140.69.197 ip
100
 242 BE 2026-11-07 22:56 UTC 2026-11-07 22:52 UTC
34.38.220.175 ip
100
 241 BE 2026-11-07 22:56 UTC 2026-11-07 22:51 UTC

Showing 1-25 of 88274 indicators