IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 104.28.231.132 ip
Score
100
/100
raw: 77.98
Reports
9
Last Reported
2026-11-15 13:05 UTC
Categories
Config Exposure Probe (5)
API Probe (3)
Scanning (1)
Network details
ASN
13335
Organization
Cloudflare, Inc.
Country
MX
Threat Intelligence enriched 2026-11-15 13:04 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 9 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-15 13:04 UTC | graphql | direct | GET | /graphql | burst |
| 2026-11-15 13:04 UTC | api-admin-export | direct | GET | /api/v1/admin/export/ | burst |
| 2026-11-15 13:04 UTC | catch-all-config | direct | GET | /.env.save | burst |
| 2026-11-15 13:04 UTC | catch-all-scan | direct | GET | /.dev.vars | burst |
| 2026-11-15 13:04 UTC | wp-config | direct | GET | /wp-config.php | burst |
| 2026-11-15 13:03 UTC | api-users | direct | GET | /api/v1/users | |
| 2026-11-15 13:03 UTC | dot-env | direct | GET | /.env | |
| 2026-11-15 13:03 UTC | git-config | direct | GET | /.git/config | |
| 2026-11-15 13:03 UTC | catch-all-config | direct | GET | /.env.local |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 190.5.49.143 | ip |
39
|
1 | CL | 2026-11-15 13:13 UTC | 2026-11-15 13:13 UTC |
| 101.57.206.122 | ip |
39
|
1 | IT | 2026-11-15 13:13 UTC | 2026-11-15 13:13 UTC |
| 179.41.191.218 | ip |
88
|
3 | AR | 2026-11-15 13:12 UTC | 2026-11-15 13:12 UTC |
| 194.8.235.154 | ip |
39
|
1 | RU | 2026-11-15 13:12 UTC | 2026-11-15 13:12 UTC |
| 103.120.69.190 | ip |
50
|
1 | PH | 2026-11-15 13:12 UTC | 2026-11-15 13:12 UTC |
| 184.170.16.182 | ip |
39
|
1 | JM | 2026-11-15 13:10 UTC | 2026-11-15 13:10 UTC |
| 125.25.129.39 | ip |
50
|
1 | TH | 2026-11-15 13:10 UTC | 2026-11-15 13:10 UTC |
| 39.63.17.2 | ip |
39
|
1 | PK | 2026-11-15 13:09 UTC | 2026-11-15 13:09 UTC |
| 185.235.142.5 | ip |
50
|
1 | UA | 2026-11-15 13:08 UTC | 2026-11-15 13:08 UTC |
| 49.43.155.106 | ip |
39
|
1 | IN | 2026-11-15 13:08 UTC | 2026-11-15 13:08 UTC |
| 181.24.1.162 | ip |
50
|
1 | AR | 2026-11-15 13:08 UTC | 2026-11-15 13:08 UTC |
| 77.106.39.104 | ip |
39
|
1 | RU | 2026-11-15 13:07 UTC | 2026-11-15 13:07 UTC |
| 181.118.50.189 | ip |
39
|
1 | TT | 2026-11-15 13:07 UTC | 2026-11-15 13:07 UTC |
| 113.211.142.220 | ip |
39
|
1 | MY | 2026-11-15 13:06 UTC | 2026-11-15 13:06 UTC |
| 98.63.20.84 | ip |
18
|
1 | US | 2026-11-15 13:06 UTC | 2026-11-15 13:06 UTC |
| 86.127.228.56 | ip |
39
|
1 | ES | 2026-11-15 13:06 UTC | 2026-11-15 13:06 UTC |
| 114.130.98.215 | ip |
50
|
1 | BD | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 169.224.81.183 | ip |
39
|
1 | IQ | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 38.137.29.133 | ip |
50
|
1 | IN | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 35.214.231.158 | ip |
55
|
2 | NL | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 86.38.187.179 | ip |
39
|
1 | LT | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 31.58.245.178 | ip |
100
|
10 | TR | 2026-11-15 13:06 UTC | 2026-11-15 13:05 UTC |
| 36.77.189.55 | ip |
39
|
1 | ID | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 190.142.155.134 | ip |
50
|
1 | VE | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 104.28.231.134 | ip |
70
|
2 | MX | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
Showing 1-25 of 104988 indicators