IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 104.28.211.190 ip

Score
33
/100
raw: 3.96
Reports
83
Last Reported
2026-08-05 07:11 UTC
Categories
Config Exposure Probe (34) Scanning (23) API Probe (13) Admin Panel Probe (11) Web Stack Probe (2)

Network details

ASN
13335
Organization
Cloudflare, Inc.
Country
FR

Threat Intelligence enriched 2026-11-05 08:16 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-08-05 07:11 UTC api-version-enum direct POST /v1/graphql burst
2026-08-05 07:11 UTC api direct POST /api/graphql burst
2026-08-05 07:11 UTC api-admin-export direct GET /api/v1/admin/export/ burst
2026-08-05 07:11 UTC graphql direct GET /graphql burst
2026-08-05 07:11 UTC hidden-link:debug-console direct GET /debug/console/ burst
2026-08-05 07:11 UTC catch-all-config direct GET /.gitconfig burst
2026-08-05 07:11 UTC hidden-link:api-tokens direct GET /api/v1/tokens/ burst
2026-08-05 07:11 UTC dashboard direct GET /dashboard/ burst
2026-08-05 07:11 UTC hidden-link:internal-portal direct GET /internal-portal/ burst
2026-08-05 07:11 UTC catch-all-config direct GET /.git-credentials burst
2026-08-05 07:11 UTC cicd-config direct GET /.gitlab-ci.yml burst
2026-08-05 07:11 UTC cicd-config direct GET /.github/workflows/deploy.yml burst
2026-08-05 07:11 UTC git-head direct GET /.git/HEAD burst
2026-08-05 07:11 UTC dot-env direct GET /.env burst
2026-08-05 07:11 UTC graphql-introspection direct POST /graphql burst
2026-08-05 07:10 UTC catch-all-suspicious direct GET /asset-manifest.json burst
2026-08-05 07:10 UTC catch-all-suspicious direct GET /static/manifest.json burst
2026-08-05 07:10 UTC catch-all-suspicious direct GET /webpack-stats.json burst
2026-08-05 07:10 UTC catch-all-suspicious direct GET /dist/manifest.json burst
2026-08-05 07:10 UTC catch-all-suspicious direct GET /assets/manifest.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
202.141.104.216 ip
39
 1 IN 2026-11-12 10:35 UTC 2026-11-12 10:35 UTC
110.73.15.109 ip
50
 1 CN 2026-11-12 10:35 UTC 2026-11-12 10:35 UTC
169.224.29.216 ip
39
 1 IQ 2026-11-12 10:35 UTC 2026-11-12 10:35 UTC
195.7.10.117 ip
39
 1 IQ 2026-11-12 10:35 UTC 2026-11-12 10:35 UTC
38.183.13.249 ip
39
 1 IN 2026-11-12 10:35 UTC 2026-11-12 10:35 UTC
151.158.235.72 ip
39
 1 IN 2026-11-12 10:33 UTC 2026-11-12 10:33 UTC
157.32.138.184 ip
50
 1 IN 2026-11-12 10:33 UTC 2026-11-12 10:33 UTC
117.255.120.237 ip
39
 1 IN 2026-11-12 10:33 UTC 2026-11-12 10:33 UTC
190.163.210.124 ip
50
 1 CL 2026-11-12 10:32 UTC 2026-11-12 10:32 UTC
103.127.48.232 ip
39
 1 NP 2026-11-12 10:32 UTC 2026-11-12 10:32 UTC
61.9.10.43 ip
39
 1 PH 2026-11-12 10:32 UTC 2026-11-12 10:32 UTC
85.120.53.131 ip
45
 1 RO 2026-11-12 10:29 UTC 2026-11-12 10:29 UTC
181.118.39.40 ip
39
 1 TT 2026-11-12 10:27 UTC 2026-11-12 10:27 UTC
2.15.15.15 ip
39
 1 FR 2026-11-12 10:27 UTC 2026-11-12 10:27 UTC
148.222.194.143 ip
39
 1 AR 2026-11-12 10:27 UTC 2026-11-12 10:27 UTC
103.100.234.208 ip
39
 1 BD 2026-11-12 10:26 UTC 2026-11-12 10:26 UTC
189.162.13.109 ip
39
 1 MX 2026-11-12 10:26 UTC 2026-11-12 10:26 UTC
31.41.67.126 ip
39
 1 UA 2026-11-12 10:25 UTC 2026-11-12 10:25 UTC
5.21.239.235 ip
39
 1 OM 2026-11-12 10:25 UTC 2026-11-12 10:25 UTC
37.55.40.171 ip
50
 1 UA 2026-11-12 10:24 UTC 2026-11-12 10:24 UTC
151.33.47.248 ip
39
 1 IT 2026-11-12 10:24 UTC 2026-11-12 10:24 UTC
91.106.33.74 ip
39
 1 IQ 2026-11-12 10:24 UTC 2026-11-12 10:24 UTC
106.219.85.202 ip
39
 1 IN 2026-11-12 10:24 UTC 2026-11-12 10:24 UTC
24.6.48.197 ip
39
 1 US 2026-11-12 10:24 UTC 2026-11-12 10:24 UTC
200.189.31.160 ip
50
 1 AR 2026-11-12 10:23 UTC 2026-11-12 10:23 UTC

Showing 1-25 of 96530 indicators