IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 104.28.244.150 ip
Score
100
/100
raw: 96.84
Reports
11
Last Reported
2026-11-10 05:49 UTC
Categories
Config Exposure Probe (8)
Scanning (3)
Network details
ASN
13335
Organization
Cloudflare, Inc.
Country
TR
Threat Intelligence enriched 2026-11-10 05:49 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-10 05:48 UTC | catch-all-suspicious | direct | GET | /secrets.json | burst |
| 2026-11-10 05:48 UTC | aws-creds | direct | GET | /.aws/credentials | burst |
| 2026-11-10 05:48 UTC | wp-config-backup | direct | GET | /wp-config.php.bak | burst |
| 2026-11-10 05:48 UTC | catch-all-suspicious | direct | GET | /config.json | burst |
| 2026-11-10 05:48 UTC | catch-all-scan | direct | GET | /.dev.vars | burst |
| 2026-11-10 05:48 UTC | catch-all-config | direct | GET | /.env.production | burst |
| 2026-11-10 05:48 UTC | git-config | direct | GET | /.git/config | burst |
| 2026-11-10 05:48 UTC | catch-all-config | direct | GET | /.env.backup | |
| 2026-11-10 05:48 UTC | dot-env | direct | GET | /.env | |
| 2026-11-10 05:48 UTC | catch-all-config | direct | GET | /.env.local | |
| 2026-11-10 05:48 UTC | git-head | direct | GET | /.git/HEAD |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 194.5.152.87 | ip |
100
|
17 | FR | 2026-11-10 06:36 UTC | 2026-11-10 06:36 UTC |
| 162.158.95.17 | ip |
70
|
2 | US | 2026-11-10 06:31 UTC | 2026-11-10 06:31 UTC |
| 190.140.115.254 | ip |
100
|
17 | PA | 2026-11-10 06:27 UTC | 2026-11-10 06:24 UTC |
| 187.230.140.3 | ip |
100
|
15 | MX | 2026-11-10 06:27 UTC | 2026-11-10 06:24 UTC |
| 152.171.51.205 | ip |
100
|
14 | AR | 2026-11-10 06:27 UTC | 2026-11-10 06:24 UTC |
| 14.191.147.147 | ip |
100
|
15 | VN | 2026-11-10 06:27 UTC | 2026-11-10 06:24 UTC |
| 178.254.50.20 | ip |
50
|
1 | DE | 2026-11-10 06:19 UTC | 2026-11-10 06:19 UTC |
| 152.59.119.131 | ip |
39
|
1 | IN | 2026-11-10 06:12 UTC | 2026-11-10 06:12 UTC |
| 41.250.193.165 | ip |
63
|
2 | MA | 2026-11-10 06:12 UTC | 2026-11-10 06:12 UTC |
| 190.164.115.149 | ip |
39
|
1 | CL | 2026-11-10 06:12 UTC | 2026-11-10 06:12 UTC |
| 160.202.36.60 | ip |
45
|
3 | IN | 2026-11-10 06:12 UTC | 2026-11-10 06:12 UTC |
| 157.49.178.70 | ip |
78
|
3 | IN | 2026-11-10 05:59 UTC | 2026-11-10 05:58 UTC |
| 178.151.100.77 | ip |
100
|
15 | UA | 2026-11-10 05:59 UTC | 2026-11-10 05:56 UTC |
| 102.207.105.65 | ip |
100
|
14 | SL | 2026-11-10 05:59 UTC | 2026-11-10 05:56 UTC |
| 89.47.238.114 | ip |
100
|
17 | ES | 2026-11-10 05:59 UTC | 2026-11-10 05:56 UTC |
| 223.238.136.79 | ip |
100
|
14 | IN | 2026-11-10 05:59 UTC | 2026-11-10 05:56 UTC |
| 37.52.68.243 | ip |
99
|
8 | UA | 2026-11-10 05:57 UTC | 2026-11-10 05:56 UTC |
| 104.244.227.151 | ip |
100
|
16 | JM | 2026-11-10 05:59 UTC | 2026-11-10 05:56 UTC |
| 69.30.195.26 | ip |
59
|
1 | US | 2026-11-10 05:54 UTC | 2026-11-10 05:54 UTC |
| 104.28.244.150 | ip |
100
|
11 | TR | 2026-11-10 05:49 UTC | 2026-11-10 05:49 UTC |
| 147.224.136.207 | ip |
100
|
189 | US | 2026-11-10 05:48 UTC | 2026-11-10 05:47 UTC |
| 103.148.11.113 | ip |
39
|
1 | BD | 2026-11-10 05:41 UTC | 2026-11-10 05:41 UTC |
| 196.119.174.239 | ip |
39
|
1 | MA | 2026-11-10 05:41 UTC | 2026-11-10 05:41 UTC |
| 45.185.231.54 | ip |
39
|
1 | BR | 2026-11-10 05:41 UTC | 2026-11-10 05:41 UTC |
| 108.163.159.20 | ip |
50
|
1 | CA | 2026-11-10 05:27 UTC | 2026-11-10 05:27 UTC |
Showing 1-25 of 91449 indicators