IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 104.28.196.57 ip

Score
100
/100
raw: 779.22
Reports
174
Last Reported
2026-11-09 00:56 UTC
Categories
Config Exposure Probe (124) Scanning (42) Admin Panel Probe (3) API Probe (3) Web Stack Probe (2)

Network details

ASN
13335
Organization
Cloudflare, Inc.
Country
FR

Threat Intelligence enriched 2026-11-04 15:11 UTC

DNSBL Status
Listed
zen.spamhaus.org bl.spamcop.net

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-09 00:56 UTC git-config direct GET /.git/config
2026-11-09 00:56 UTC catch-all-config direct GET /.env.production
2026-11-08 20:37 UTC catch-all-config direct GET /.env.development.local burst
2026-11-08 20:37 UTC catch-all-suspicious direct GET /config.yml burst
2026-11-08 20:37 UTC catch-all-config direct GET /.env.bak
2026-11-08 20:37 UTC catch-all-config direct GET /.env.test
2026-11-08 20:37 UTC catch-all-config direct GET /.env.old
2026-11-08 20:37 UTC catch-all-config direct GET /.env.bak
2026-11-08 20:37 UTC catch-all-suspicious direct GET /secrets.json
2026-11-08 20:37 UTC catch-all-config direct GET /.env.production
2026-10-28 10:06 UTC git-config direct GET /.git/config
2026-10-28 04:41 UTC catch-all-config direct GET /.env.test
2026-10-27 13:01 UTC catch-all-suspicious direct GET /config.yaml burst
2026-10-27 13:01 UTC catch-all-config direct GET /.env.development.local burst
2026-10-27 13:01 UTC catch-all-scan direct GET /.pypirc burst
2026-10-27 13:01 UTC catch-all-config direct GET /.env.production.local burst
2026-10-27 13:01 UTC catch-all-suspicious direct GET /.docker/config.json burst
2026-10-27 13:01 UTC catch-all-suspicious direct GET /config.yml burst
2026-10-27 13:01 UTC catch-all-config direct GET /.env.bak burst
2026-10-27 13:01 UTC catch-all-config direct GET /.env.test burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
179.102.2.138 ip
39
 1 BR 2026-11-09 04:04 UTC 2026-11-09 04:04 UTC
200.24.134.43 ip
50
 1 EC 2026-11-09 04:04 UTC 2026-11-09 04:04 UTC
187.134.112.22 ip
39
 1 MX 2026-11-09 04:02 UTC 2026-11-09 04:02 UTC
102.0.100.152 ip
50
 1 KE 2026-11-09 04:02 UTC 2026-11-09 04:02 UTC
138.97.160.107 ip
39
 1 NI 2026-11-09 04:01 UTC 2026-11-09 04:01 UTC
103.177.252.74 ip
39
 1 IN 2026-11-09 03:59 UTC 2026-11-09 03:59 UTC
31.43.97.184 ip
50
 1 UA 2026-11-09 03:57 UTC 2026-11-09 03:57 UTC
168.195.132.204 ip
39
 1 BR 2026-11-09 03:57 UTC 2026-11-09 03:57 UTC
41.193.225.81 ip
39
 1 ZA 2026-11-09 03:56 UTC 2026-11-09 03:56 UTC
34.87.15.132 ip
39
 1 SG 2026-11-09 03:56 UTC 2026-11-09 03:56 UTC
1.55.95.114 ip
39
 1 VN 2026-11-09 03:54 UTC 2026-11-09 03:54 UTC
187.172.34.14 ip
50
 1 MX 2026-11-09 03:52 UTC 2026-11-09 03:52 UTC
106.214.3.69 ip
50
 1 IN 2026-11-09 03:52 UTC 2026-11-09 03:52 UTC
103.200.133.18 ip
50
 1 MM 2026-11-09 03:51 UTC 2026-11-09 03:51 UTC
187.173.166.231 ip
39
 1 MX 2026-11-09 03:51 UTC 2026-11-09 03:51 UTC
41.138.96.97 ip
50
 1 BF 2026-11-09 03:51 UTC 2026-11-09 03:51 UTC
41.140.162.222 ip
50
 1 MA 2026-11-09 03:49 UTC 2026-11-09 03:49 UTC
103.190.132.75 ip
39
 1 BD 2026-11-09 03:49 UTC 2026-11-09 03:49 UTC
103.78.46.71 ip
39
 1 IN 2026-11-09 03:48 UTC 2026-11-09 03:48 UTC
189.238.44.142 ip
50
 1 MX 2026-11-09 03:47 UTC 2026-11-09 03:47 UTC
103.129.76.61 ip
39
 1 MM 2026-11-09 03:45 UTC 2026-11-09 03:45 UTC
217.196.163.15 ip
39
 1 UA 2026-11-09 03:45 UTC 2026-11-09 03:45 UTC
41.103.239.187 ip
39
 1 DZ 2026-11-09 03:45 UTC 2026-11-09 03:45 UTC
171.60.183.131 ip
50
 1 IN 2026-11-09 03:44 UTC 2026-11-09 03:44 UTC
5.175.146.66 ip
50
 1 IQ 2026-11-09 03:43 UTC 2026-11-09 03:43 UTC

Showing 1-25 of 89841 indicators