IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 104.23.166.111 ip
Score
72
/100
raw: 12.57
Reports
16
Last Reported
2026-10-12 03:18 UTC
Categories
Web Stack Probe (14)
Scanning (2)
Network details
ASN
13335
Organization
Cloudflare, Inc.
Country
NL
Threat Intelligence enriched 2026-11-03 23:04 UTC
DNSBL Status
Clean
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-10-12 03:18 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-12 03:18 UTC | wp-admin | direct | GET | /wp-admin/install.php | |
| 2026-10-06 10:24 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-06 10:24 UTC | wp-admin | direct | GET | /wp-admin/install.php | |
| 2026-10-04 01:46 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-04 01:46 UTC | wp-admin | direct | GET | /wp-admin/install.php | |
| 2026-09-22 06:08 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-22 06:08 UTC | wp-admin | direct | GET | /wp-admin/install.php | |
| 2026-09-18 06:01 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-18 06:01 UTC | wp-admin | direct | GET | /wp-admin/install.php | |
| 2026-09-07 11:36 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-07 11:35 UTC | wp-admin | direct | GET | /wp-admin/install.php | |
| 2026-07-03 21:15 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-07-03 21:15 UTC | wp-admin | direct | GET | /wp-admin/install.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 46.183.117.121 | ip |
45
|
1 | ES | 2026-11-04 06:12 UTC | 2026-11-04 06:12 UTC |
| 103.67.78.129 | ip |
75
|
2 | ID | 2026-11-04 06:12 UTC | 2026-11-04 06:12 UTC |
| 185.247.224.43 | ip |
55
|
1 | RO | 2026-11-04 06:08 UTC | 2026-11-04 06:08 UTC |
| 104.248.61.156 | ip |
18
|
1 | US | 2026-11-04 06:04 UTC | 2026-11-04 06:04 UTC |
| 103.93.219.166 | ip |
100
|
18 | PK | 2026-11-04 06:04 UTC | 2026-11-04 05:59 UTC |
| 34.23.219.146 | ip |
100
|
26 | US | 2026-11-04 05:54 UTC | 2026-11-04 05:53 UTC |
| 47.101.171.159 | ip |
99
|
6 | CN | 2026-11-04 05:51 UTC | 2026-11-04 05:50 UTC |
| 86.48.2.136 | ip |
100
|
14 | FR | 2026-11-04 05:47 UTC | 2026-11-04 05:47 UTC |
| 8.134.95.40 | ip |
88
|
3 | CN | 2026-11-04 05:46 UTC | 2026-11-04 05:46 UTC |
| 147.182.165.92 | ip |
55
|
2 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 159.89.142.101 | ip |
18
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 178.128.11.78 | ip |
33
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 138.68.53.28 | ip |
50
|
1 | US | 2026-11-04 05:24 UTC | 2026-11-04 05:24 UTC |
| 52.187.224.173 | ip |
100
|
103 | AU | 2026-11-04 05:34 UTC | 2026-11-04 05:17 UTC |
| 51.255.165.74 | ip |
100
|
11 | FR | 2026-11-04 05:16 UTC | 2026-11-04 05:15 UTC |
| 34.27.245.17 | ip |
18
|
1 | US | 2026-11-04 05:14 UTC | 2026-11-04 05:14 UTC |
| 163.227.230.194 | ip |
45
|
1 | VN | 2026-11-04 05:12 UTC | 2026-11-04 05:12 UTC |
| 169.58.14.55 | ip |
100
|
11 | FR | 2026-11-04 05:10 UTC | 2026-11-04 05:09 UTC |
| 163.5.222.217 | ip |
45
|
1 | GB | 2026-11-04 05:05 UTC | 2026-11-04 05:05 UTC |
| 192.53.123.56 | ip |
18
|
1 | CA | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 138.197.157.0 | ip |
55
|
2 | CA | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 178.128.79.128 | ip |
33
|
1 | US | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 192.155.89.199 | ip |
50
|
1 | US | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 157.230.92.201 | ip |
33
|
1 | US | 2026-11-04 05:01 UTC | 2026-11-04 05:01 UTC |
| 138.197.211.94 | ip |
18
|
1 | US | 2026-11-04 05:01 UTC | 2026-11-04 05:01 UTC |
Showing 1-25 of 86492 indicators