IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 108.170.28.178 ip

Score
4
/100
raw: 0.37
Reports
45
Last Reported
2026-06-22 01:10 UTC
Categories
Config Exposure Probe (35) Scanning (5) Admin Panel Probe (2) Credential Stuffing (2) API Probe (1)

Network details

ASN
20454
Organization
SECURED SERVERS LLC
Country
US

Threat Intelligence enriched 2026-11-04 20:01 UTC

Reverse DNS
hosting.incrediweb.net
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-22 01:10 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-22 01:10 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-22 01:10 UTC catch-all-config direct GET /.env.production
2026-06-22 01:10 UTC catch-all-config direct GET /.env.local
2026-06-22 01:10 UTC dot-env direct GET /.env
2026-06-22 01:10 UTC git-config direct GET /.git/config
2026-06-21 18:56 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-21 18:56 UTC sql-dump direct GET /dump.sql burst
2026-06-21 18:56 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-21 18:56 UTC config-php direct GET /config.php burst
2026-06-21 18:56 UTC ds-store direct GET /.DS_Store burst
2026-06-21 18:56 UTC actuator direct GET /actuator/env burst
2026-06-21 18:56 UTC server-status direct GET /server-status burst
2026-06-21 18:56 UTC aws-creds direct GET /.aws/credentials burst
2026-06-21 18:56 UTC wp-config direct GET /wp-config.php burst
2026-06-21 18:56 UTC catch-all-config direct GET /.env.save burst
2026-06-21 18:55 UTC catch-all-config direct GET /.env.backup burst
2026-06-21 18:55 UTC catch-all-config direct GET /.env.production burst
2026-06-21 18:55 UTC catch-all-config direct GET /.env.local
2026-06-21 18:55 UTC dot-env direct GET /.env

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
213.230.92.69 ip
50
 1 UZ 2026-11-10 03:56 UTC 2026-11-10 03:56 UTC
9.246.45.219 ip
50
 1 DE 2026-11-10 03:55 UTC 2026-11-10 03:55 UTC
34.236.223.187 ip
50
 1 US 2026-11-10 03:52 UTC 2026-11-10 03:52 UTC
187.188.227.251 ip
50
 1 MX 2026-11-10 03:52 UTC 2026-11-10 03:52 UTC
190.183.170.97 ip
50
 1 AR 2026-11-10 03:51 UTC 2026-11-10 03:51 UTC
160.187.159.18 ip
50
 1 BD 2026-11-10 03:50 UTC 2026-11-10 03:50 UTC
45.44.100.29 ip
50
 1 CA 2026-11-10 03:48 UTC 2026-11-10 03:48 UTC
196.3.215.222 ip
50
 1 BB 2026-11-10 03:46 UTC 2026-11-10 03:46 UTC
187.190.154.26 ip
50
 1 MX 2026-11-10 03:46 UTC 2026-11-10 03:46 UTC
45.160.42.184 ip
50
 1 BR 2026-11-10 03:46 UTC 2026-11-10 03:46 UTC
96.255.168.84 ip
50
 1 US 2026-11-10 03:45 UTC 2026-11-10 03:45 UTC
87.252.111.156 ip
50
 1 PS 2026-11-10 03:44 UTC 2026-11-10 03:44 UTC
176.62.116.151 ip
50
 1 RU 2026-11-10 03:43 UTC 2026-11-10 03:43 UTC
160.226.134.236 ip
50
 1 ZA 2026-11-10 03:43 UTC 2026-11-10 03:43 UTC
149.107.235.171 ip
50
 1 AR 2026-11-10 03:43 UTC 2026-11-10 03:43 UTC
103.187.158.147 ip
50
 1 IN 2026-11-10 03:41 UTC 2026-11-10 03:41 UTC
200.50.211.182 ip
50
 1 BR 2026-11-10 03:40 UTC 2026-11-10 03:40 UTC
179.110.94.27 ip
50
 1 BR 2026-11-10 03:40 UTC 2026-11-10 03:40 UTC
38.17.12.241 ip
50
 1 AR 2026-11-10 03:39 UTC 2026-11-10 03:39 UTC
198.12.60.11 ip
50
 1 AR 2026-11-10 03:37 UTC 2026-11-10 03:37 UTC
123.200.236.215 ip
50
 1 EC 2026-11-10 03:37 UTC 2026-11-10 03:37 UTC
31.41.94.253 ip
50
 1 UA 2026-11-10 03:37 UTC 2026-11-10 03:37 UTC
186.178.229.100 ip
50
 1 EC 2026-11-10 03:36 UTC 2026-11-10 03:36 UTC
177.184.116.144 ip
50
 1 BR 2026-11-10 03:36 UTC 2026-11-10 03:36 UTC
49.149.87.176 ip
50
 1 PH 2026-11-10 03:36 UTC 2026-11-10 03:36 UTC

Showing 1-25 of 91395 indicators