IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 104.28.236.176 ip

Score
18
/100
raw: 1.94
Reports
99
Last Reported
2026-07-19 10:51 UTC
Categories
Config Exposure Probe (38) Scanning (34) Admin Panel Probe (15) API Probe (10) Web Stack Probe (2)

Network details

ASN
13335
Organization
Cloudflare, Inc.
Country
US

Threat Intelligence enriched 2026-11-12 18:13 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-19 10:51 UTC catch-all-admin direct GET /console burst
2026-07-19 10:51 UTC catch-all-scan direct GET /app burst
2026-07-19 10:51 UTC admin direct GET /admin burst
2026-07-19 10:51 UTC catch-all-scan direct GET /settings burst
2026-07-19 10:51 UTC dashboard direct GET /dashboard burst
2026-07-19 10:51 UTC api-version-enum direct POST /v1/graphql scanner burst
2026-07-19 10:50 UTC graphql direct GET /graphql burst
2026-07-19 10:50 UTC dashboard direct GET /dashboard/ burst
2026-07-19 10:50 UTC api-admin-export direct GET /api/v1/admin/export/ burst
2026-07-19 10:50 UTC hidden-link:internal-portal direct GET /internal-portal/ burst
2026-07-19 10:50 UTC hidden-link:debug-console direct GET /debug/console/ burst
2026-07-19 10:50 UTC hidden-link:api-tokens direct GET /api/v1/tokens/ burst
2026-07-19 10:50 UTC api direct POST /api/graphql scanner burst
2026-07-19 10:50 UTC catch-all-suspicious direct GET /.next/build-manifest.json burst
2026-07-19 10:50 UTC catch-all-suspicious direct GET /build-manifest.json burst
2026-07-19 10:50 UTC catch-all-scan direct GET /_next/static/buildManifest.js burst
2026-07-19 10:50 UTC catch-all-suspicious direct GET /_next/build-manifest.json burst
2026-07-19 10:50 UTC git-config direct GET /.git/config burst
2026-07-19 10:50 UTC catch-all-suspicious direct GET /asset-manifest.json burst
2026-07-19 10:50 UTC catch-all-suspicious direct GET /webpack-stats.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
78.190.24.132 ip
39
 1 TR 2026-11-13 12:25 UTC 2026-11-13 12:25 UTC
47.72.129.77 ip
50
 1 NZ 2026-11-13 12:25 UTC 2026-11-13 12:25 UTC
5.178.10.33 ip
50
 1 AZ 2026-11-13 12:24 UTC 2026-11-13 12:24 UTC
176.100.58.189 ip
39
 1 UA 2026-11-13 12:24 UTC 2026-11-13 12:24 UTC
103.229.122.114 ip
39
 1 MN 2026-11-13 12:24 UTC 2026-11-13 12:24 UTC
186.56.81.82 ip
50
 1 AR 2026-11-13 12:24 UTC 2026-11-13 12:24 UTC
117.220.104.123 ip
39
 1 IN 2026-11-13 12:23 UTC 2026-11-13 12:23 UTC
103.12.173.246 ip
50
 1 BD 2026-11-13 12:23 UTC 2026-11-13 12:23 UTC
45.89.242.174 ip
97
 4 GB 2026-11-13 12:23 UTC 2026-11-13 12:22 UTC
103.42.167.175 ip
50
 1 IN 2026-11-13 12:22 UTC 2026-11-13 12:22 UTC
185.198.243.217 ip
45
 1 GB 2026-11-13 12:22 UTC 2026-11-13 12:22 UTC
185.198.243.220 ip
45
 1 GB 2026-11-13 12:21 UTC 2026-11-13 12:21 UTC
185.198.243.230 ip
97
 4 GB 2026-11-13 12:21 UTC 2026-11-13 12:21 UTC
102.212.189.102 ip
50
 1 CI 2026-11-13 12:21 UTC 2026-11-13 12:21 UTC
181.229.240.42 ip
39
 1 AR 2026-11-13 12:21 UTC 2026-11-13 12:21 UTC
93.148.111.19 ip
39
 1 IT 2026-11-13 12:21 UTC 2026-11-13 12:21 UTC
160.242.24.14 ip
39
 1 AO 2026-11-13 12:21 UTC 2026-11-13 12:21 UTC
110.38.3.151 ip
39
 1 PK 2026-11-13 12:20 UTC 2026-11-13 12:20 UTC
103.168.2.122 ip
50
 1 IN 2026-11-13 12:20 UTC 2026-11-13 12:20 UTC
187.202.255.65 ip
39
 1 MX 2026-11-13 12:19 UTC 2026-11-13 12:19 UTC
187.188.225.107 ip
39
 1 MX 2026-11-13 12:17 UTC 2026-11-13 12:17 UTC
89.188.179.6 ip
50
 1 RU 2026-11-13 12:17 UTC 2026-11-13 12:17 UTC
102.178.181.18 ip
39
 1 BF 2026-11-13 12:16 UTC 2026-11-13 12:16 UTC
42.190.187.187 ip
50
 1 MY 2026-11-13 12:15 UTC 2026-11-13 12:15 UTC
171.76.110.13 ip
39
 1 IN 2026-11-13 12:15 UTC 2026-11-13 12:15 UTC

Showing 1-25 of 98464 indicators