IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 104.168.115.241 ip

Score
30
/100
raw: 3.56
Reports
48
Last Reported
2026-08-01 18:37 UTC
Categories
Config Exposure Probe (24) Scanning (18) API Probe (4) Admin Panel Probe (1) Web Stack Probe (1)

Network details

ASN
36352
Organization
HostPapa
Country
US

Threat Intelligence enriched 2026-11-04 02:05 UTC

Reverse DNS
104-168-115-241-host.colocrossing.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-08-01 18:36 UTC wp-json direct GET /wp-json/
2026-08-01 18:28 UTC graphql-introspection direct POST /graphql burst
2026-08-01 18:28 UTC catch-all-scan direct GET /__nonexistent_6256_90671 burst
2026-08-01 18:28 UTC catch-all-config direct GET /backend/.git/HEAD burst
2026-08-01 18:28 UTC catch-all-config direct GET /src/.git/HEAD burst
2026-08-01 18:28 UTC catch-all-config direct GET /public/.git/HEAD burst
2026-08-01 18:28 UTC catch-all-config direct GET /app/.git/HEAD burst
2026-08-01 18:27 UTC git-head direct GET /.git/HEAD burst
2026-08-01 18:27 UTC actuator direct GET /actuator/env burst
2026-08-01 18:27 UTC catch-all-suspicious direct GET /secrets.json burst
2026-08-01 18:27 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-08-01 18:27 UTC catch-all-suspicious direct GET /config.json burst
2026-08-01 18:27 UTC docker-compose direct GET /docker-compose.yml burst
2026-08-01 18:27 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-08-01 18:27 UTC catch-all-scan direct GET /application.properties burst
2026-08-01 18:27 UTC catch-all-suspicious direct GET /application.yml burst
2026-08-01 18:27 UTC actuator direct GET /actuator/env burst
2026-08-01 18:27 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-08-01 18:27 UTC wp-config direct GET /wp-config.php burst
2026-08-01 18:27 UTC git-config direct GET /.git/config burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
37.65.167.80 ip
39
 1 FR 2026-11-04 20:53 UTC 2026-11-04 20:53 UTC
168.144.164.224 ip
94
 4 US 2026-11-04 20:51 UTC 2026-11-04 20:51 UTC
38.211.32.158 ip
39
 1 AR 2026-11-04 20:43 UTC 2026-11-04 20:43 UTC
185.65.255.101 ip
39
 1 IQ 2026-11-04 20:42 UTC 2026-11-04 20:42 UTC
45.136.26.202 ip
50
 1 US 2026-11-04 20:41 UTC 2026-11-04 20:41 UTC
172.239.39.134 ip
99
 6 US 2026-11-04 20:24 UTC 2026-11-04 20:23 UTC
200.50.159.55 ip
39
 1 PY 2026-11-04 20:21 UTC 2026-11-04 20:21 UTC
176.146.78.23 ip
39
 1 FR 2026-11-04 20:13 UTC 2026-11-04 20:13 UTC
2.90.98.131 ip
39
 1 SA 2026-11-04 20:08 UTC 2026-11-04 20:08 UTC
158.173.77.33 ip
100
 122 IT 2026-11-04 19:56 UTC 2026-11-04 19:55 UTC
190.109.123.110 ip
39
 1 EC 2026-11-04 19:48 UTC 2026-11-04 19:48 UTC
170.150.23.83 ip
39
 1 BR 2026-11-04 19:44 UTC 2026-11-04 19:44 UTC
179.191.44.38 ip
39
 1 BR 2026-11-04 19:35 UTC 2026-11-04 19:35 UTC
45.144.52.239 ip
100
 92 FI 2026-11-04 19:32 UTC 2026-11-04 19:32 UTC
20.65.170.194 ip
18
 1 US 2026-11-04 19:30 UTC 2026-11-04 19:30 UTC
172.81.135.182 ip
55
 1 US 2026-11-04 19:26 UTC 2026-11-04 19:26 UTC
52.248.43.16 ip
18
 1 US 2026-11-04 19:26 UTC 2026-11-04 19:26 UTC
14.192.214.206 ip
39
 1 MY 2026-11-04 19:17 UTC 2026-11-04 19:17 UTC
103.138.123.21 ip
39
 1 BD 2026-11-04 19:15 UTC 2026-11-04 19:15 UTC
107.178.215.235 ip
100
 24 US 2026-11-04 19:15 UTC 2026-11-04 19:14 UTC
34.150.111.203 ip
100
 160 HK 2026-11-04 19:06 UTC 2026-11-04 19:04 UTC
91.225.4.22 ip
39
 1 UA 2026-11-04 19:01 UTC 2026-11-04 19:01 UTC
164.92.181.190 ip
80
 6 DE 2026-11-04 18:58 UTC 2026-11-04 18:58 UTC
198.54.114.5 ip
45
 1 US 2026-11-04 18:55 UTC 2026-11-04 18:55 UTC
212.47.136.128 ip
39
 1 AZ 2026-11-04 18:45 UTC 2026-11-04 18:45 UTC

Showing 1-25 of 86772 indicators