IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 104.28.227.186 ip

Score
56
/100
raw: 8.24
Reports
150
Last Reported
2026-07-30 17:49 UTC
Categories
Scanning (58) Config Exposure Probe (38) Admin Panel Probe (26) API Probe (26) Web Stack Probe (2)

Network details

ASN
13335
Organization
Cloudflare, Inc.
Country
US

Threat Intelligence enriched 2026-11-04 02:04 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-30 17:48 UTC api-version-enum direct POST /v1/graphql burst
2026-07-30 17:48 UTC api direct POST /api/graphql burst
2026-07-30 17:48 UTC api direct GET /api/env burst
2026-07-30 17:48 UTC api direct GET /api/config burst
2026-07-30 17:48 UTC hidden-link:api-tokens direct GET /api/v1/tokens/ burst
2026-07-30 17:48 UTC api-admin-export direct GET /api/v1/admin/export/ burst
2026-07-30 17:48 UTC dot-env direct GET /.env burst
2026-07-30 17:48 UTC catch-all-config direct GET /.env.example burst
2026-07-30 17:48 UTC catch-all-config direct GET /.env.production burst
2026-07-30 17:48 UTC dashboard direct GET /dashboard/ burst
2026-07-30 17:48 UTC graphql-introspection direct POST /graphql burst
2026-07-30 17:48 UTC cicd-config direct GET /.github/workflows/deploy.yml burst
2026-07-30 17:48 UTC hidden-link:debug-console direct GET /debug/console/ burst
2026-07-30 17:48 UTC graphql direct GET /graphql burst
2026-07-30 17:48 UTC cicd-config direct GET /.gitlab-ci.yml burst
2026-07-30 17:48 UTC hidden-link:internal-portal direct GET /internal-portal/ burst
2026-07-30 17:48 UTC catch-all-config direct GET /.gitconfig burst
2026-07-30 17:48 UTC catch-all-suspicious direct GET /asset-manifest.json burst
2026-07-30 17:48 UTC catch-all-suspicious direct GET /assets/manifest.json burst
2026-07-30 17:48 UTC catch-all-suspicious direct GET /static/manifest.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
34.32.128.210 ip
100
 45 NL 2026-11-04 18:24 UTC 2026-11-04 18:22 UTC
58.10.55.232 ip
39
 1 TH 2026-11-04 18:12 UTC 2026-11-04 18:12 UTC
5.226.140.89 ip
39
 1 GB 2026-11-04 18:07 UTC 2026-11-04 18:07 UTC
146.190.55.89 ip
80
 2 US 2026-11-04 18:05 UTC 2026-11-04 18:05 UTC
193.176.29.24 ip
39
 1 GB 2026-11-04 18:01 UTC 2026-11-04 18:01 UTC
51.81.170.13 ip
18
 1 US 2026-11-04 17:58 UTC 2026-11-04 17:58 UTC
136.69.151.151 ip
50
 1 US 2026-11-04 17:57 UTC 2026-11-04 17:57 UTC
129.208.126.35 ip
39
 1 SA 2026-11-04 17:54 UTC 2026-11-04 17:54 UTC
103.158.121.4 ip
100
 12 ID 2026-11-04 18:16 UTC 2026-11-04 17:47 UTC
185.99.7.32 ip
39
 1 RU 2026-11-04 17:46 UTC 2026-11-04 17:46 UTC
136.111.236.146 ip
50
 1 US 2026-11-04 17:44 UTC 2026-11-04 17:43 UTC
91.220.135.228 ip
39
 1 RU 2026-11-04 17:39 UTC 2026-11-04 17:39 UTC
136.80.237.3 ip
55
 4 US 2026-11-04 17:33 UTC 2026-11-04 17:32 UTC
159.89.112.235 ip
80
 2 CA 2026-11-04 17:23 UTC 2026-11-04 17:23 UTC
154.79.251.152 ip
39
 1 KE 2026-11-04 17:18 UTC 2026-11-04 17:18 UTC
106.192.209.24 ip
39
 1 IN 2026-11-04 17:18 UTC 2026-11-04 17:18 UTC
34.64.140.255 ip
100
 80 KR 2026-11-04 17:17 UTC 2026-11-04 17:15 UTC
66.132.159.141 ip
18
 1 US 2026-11-04 17:12 UTC 2026-11-04 17:12 UTC
103.31.179.72 ip
39
 1 BD 2026-11-04 17:05 UTC 2026-11-04 17:05 UTC
109.105.209.47 ip
18
 1 PT 2026-11-04 17:02 UTC 2026-11-04 17:02 UTC
51.38.237.146 ip
100
 23 FR 2026-11-04 16:56 UTC 2026-11-04 16:56 UTC
46.191.155.249 ip
39
 1 RU 2026-11-04 16:48 UTC 2026-11-04 16:48 UTC
172.64.198.163 ip
45
 1 PL 2026-11-04 16:46 UTC 2026-11-04 16:46 UTC
172.64.198.162 ip
45
 1 PL 2026-11-04 16:46 UTC 2026-11-04 16:46 UTC
197.153.62.173 ip
39
 1 MA 2026-11-04 16:43 UTC 2026-11-04 16:43 UTC

Showing 1-25 of 86742 indicators