IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 104.28.227.126 ip

Score
100
/100
raw: 208.68
Reports
22
Last Reported
2026-11-10 18:38 UTC
Categories
Config Exposure Probe (14) Scanning (5) API Probe (3)

Network details

ASN
13335
Organization
Cloudflare, Inc.
Country
BE

Threat Intelligence enriched 2026-11-10 18:35 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-10 18:37 UTC catch-all-suspicious direct GET /sa.json
2026-11-10 18:37 UTC api direct GET /api/.env.bak
2026-11-10 18:37 UTC catch-all-config direct GET /apps/.env
2026-11-10 18:36 UTC catch-all-config direct GET /.env.preprod
2026-11-10 18:36 UTC actuator direct GET /actuator/env burst
2026-11-10 18:35 UTC catch-all-scan direct GET /env.js burst
2026-11-10 18:35 UTC catch-all-config direct GET /backend/.env.local
2026-11-10 18:35 UTC catch-all-config direct GET /html/.env
2026-11-10 18:35 UTC api direct GET /api/.env.bak
2026-11-10 18:35 UTC catch-all-config direct GET /.env.mail burst
2026-11-10 18:35 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-11-10 18:35 UTC wp-config direct GET /wp-config.php burst
2026-11-10 18:35 UTC catch-all-suspicious direct GET /gradio_api/config burst
2026-11-10 18:35 UTC dot-env direct GET /.env burst
2026-11-10 18:35 UTC catch-all-scan direct GET /__vite_rsc_findSourceMapURL burst
2026-11-10 18:35 UTC dot-env direct GET /.env burst
2026-11-10 18:35 UTC catch-all-scan direct GET /__vite_rsc_findSourceMapURL burst
2026-11-10 18:35 UTC catch-all-config direct GET /.env.production burst
2026-11-10 18:35 UTC catch-all-config direct GET /.env.local
2026-11-10 18:35 UTC catch-all-config direct GET /@fs/.env

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
185.111.245.212 ip
59
 1 TR 2026-11-10 19:18 UTC 2026-11-10 19:18 UTC
212.227.230.84 ip
50
 1 ES 2026-11-10 19:18 UTC 2026-11-10 19:18 UTC
68.155.153.29 ip
100
 25 MX 2026-11-10 19:19 UTC 2026-11-10 19:16 UTC
20.57.16.117 ip
50
 1 US 2026-11-10 19:08 UTC 2026-11-10 19:08 UTC
23.234.106.94 ip
100
 79 US 2026-11-10 19:12 UTC 2026-11-10 19:07 UTC
51.81.170.4 ip
18
 1 US 2026-11-10 19:04 UTC 2026-11-10 19:04 UTC
20.92.243.53 ip
100
 28 AU 2026-11-10 19:07 UTC 2026-11-10 19:03 UTC
35.163.119.59 ip
50
 1 US 2026-11-10 18:58 UTC 2026-11-10 18:58 UTC
70.27.36.156 ip
73
 3 CA 2026-11-10 18:57 UTC 2026-11-10 18:57 UTC
202.69.42.226 ip
39
 1 PK 2026-11-10 18:57 UTC 2026-11-10 18:57 UTC
185.35.8.238 ip
39
 1 UA 2026-11-10 18:57 UTC 2026-11-10 18:57 UTC
37.215.8.232 ip
78
 3 BY 2026-11-10 18:57 UTC 2026-11-10 18:57 UTC
102.90.99.144 ip
39
 1 NG 2026-11-10 18:57 UTC 2026-11-10 18:57 UTC
152.58.153.119 ip
92
 4 IN 2026-11-10 18:57 UTC 2026-11-10 18:56 UTC
91.208.221.12 ip
50
 1 SE 2026-11-10 18:44 UTC 2026-11-10 18:44 UTC
104.28.227.126 ip
100
 22 BE 2026-11-10 18:38 UTC 2026-11-10 18:35 UTC
34.53.232.129 ip
33
 1 BE 2026-11-10 18:35 UTC 2026-11-10 18:35 UTC
201.79.123.92 ip
99
 7 SG 2026-11-10 18:25 UTC 2026-11-10 18:23 UTC
188.209.159.205 ip
80
 2 JP 2026-11-10 19:14 UTC 2026-11-10 18:14 UTC
143.198.90.246 ip
99
 7 SG 2026-11-10 18:16 UTC 2026-11-10 18:14 UTC
45.9.61.45 ip
50
 1 DE 2026-11-10 18:10 UTC 2026-11-10 18:10 UTC
91.242.55.159 ip
39
 1 UA 2026-11-10 18:07 UTC 2026-11-10 18:07 UTC
91.209.65.205 ip
78
 3 RU 2026-11-10 18:07 UTC 2026-11-10 18:07 UTC
198.56.24.214 ip
86
 4 BD 2026-11-10 18:07 UTC 2026-11-10 18:06 UTC
196.61.241.151 ip
88
 4 ZA 2026-11-10 18:07 UTC 2026-11-10 18:06 UTC

Showing 1-25 of 91983 indicators