IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 172.104.137.117 ip

Score
4
/100
raw: 0.4
Reports
183
Last Reported
2026-05-22 05:31 UTC
Categories
Scanning (136) Config Exposure Probe (38) API Probe (7) Admin Panel Probe (2)

Network details

ASN
63949
Organization
Akamai Connected Cloud
Country
DE

Threat Intelligence enriched 2026-11-04 04:08 UTC

Reverse DNS
172-104-137-117.ip.linodeusercontent.com
DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-22 05:31 UTC catch-all-suspicious direct GET /App.config burst
2026-05-22 05:31 UTC build-artifact direct GET /yarn.lock burst
2026-05-22 05:31 UTC catch-all-scan direct GET /.npmrc burst
2026-05-22 05:31 UTC docker-compose direct GET /docker-compose.yml burst
2026-05-22 05:31 UTC catch-all-scan direct GET /swagger-ui.html burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /config.json burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /static/aws-config.js burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /server/api/aws.config.js burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /config/aws.json burst
2026-05-22 05:31 UTC catch-all-config direct GET /.git-credentials burst
2026-05-22 05:31 UTC build-artifact direct GET /composer.lock burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /aws-keys.json burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /application.yml burst
2026-05-22 05:31 UTC catch-all-script direct GET /phpinfo.php burst
2026-05-22 05:31 UTC catch-all-script direct GET /configuration.php burst
2026-05-22 05:31 UTC catch-all-scan direct GET /amplify/backend/aws-exports.js burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /aws-sam.yml burst
2026-05-22 05:31 UTC catch-all-suspicious direct GET /aws-cloudformation-template.json burst
2026-05-22 05:31 UTC catch-all-config direct GET /.env.json burst
2026-05-22 05:31 UTC catch-all-script direct GET /env.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
200.39.136.108 ip
39
1 CL 2026-11-05 22:08 UTC 2026-11-05 22:08 UTC
77.211.7.8 ip
39
1 ES 2026-11-05 22:04 UTC 2026-11-05 22:04 UTC
34.187.91.87 ip
63
5 NL 2026-11-05 21:58 UTC 2026-11-05 21:58 UTC
160.20.40.25 ip
39
1 PH 2026-11-05 21:52 UTC 2026-11-05 21:52 UTC
194.5.49.146 ip
100
171 DE 2026-11-05 21:42 UTC 2026-11-05 21:41 UTC
168.81.72.39 ip
26
1 IN 2026-11-05 21:32 UTC 2026-11-05 21:32 UTC
149.248.76.75 ip
75
4 US 2026-11-05 21:29 UTC 2026-11-05 21:29 UTC
197.203.208.71 ip
39
1 DZ 2026-11-05 21:17 UTC 2026-11-05 21:17 UTC
34.178.240.202 ip
39
1 NL 2026-11-05 20:59 UTC 2026-11-05 20:59 UTC
190.114.43.108 ip
39
1 CL 2026-11-05 20:58 UTC 2026-11-05 20:58 UTC
170.64.192.106 ip
94
4 AU 2026-11-05 20:51 UTC 2026-11-05 20:51 UTC
83.228.254.162 ip
50
1 CH 2026-11-05 20:49 UTC 2026-11-05 20:49 UTC
172.71.234.27 ip
70
2 BR 2026-11-05 20:44 UTC 2026-11-05 20:44 UTC
148.224.8.254 ip
39
1 MX 2026-11-05 20:43 UTC 2026-11-05 20:43 UTC
186.109.120.142 ip
39
1 AR 2026-11-05 20:39 UTC 2026-11-05 20:39 UTC
110.138.81.37 ip
39
1 ID 2026-11-05 20:37 UTC 2026-11-05 20:37 UTC
182.10.66.35 ip
18
1 ID 2026-11-05 20:33 UTC 2026-11-05 20:33 UTC
193.149.190.86 ip
75
4 GB 2026-11-05 20:27 UTC 2026-11-05 20:27 UTC
105.77.200.214 ip
39
1 MA 2026-11-05 20:25 UTC 2026-11-05 20:25 UTC
142.93.166.142 ip
18
1 DE 2026-11-05 20:23 UTC 2026-11-05 20:23 UTC
153.117.34.200 ip
18
1 PK 2026-11-05 20:18 UTC 2026-11-05 20:18 UTC
194.146.92.58 ip
100
12 ES 2026-11-05 20:16 UTC 2026-11-05 20:16 UTC
161.35.27.28 ip
18
1 DE 2026-11-05 20:16 UTC 2026-11-05 20:16 UTC
213.230.93.54 ip
39
1 UZ 2026-11-05 20:09 UTC 2026-11-05 20:09 UTC
197.15.222.89 ip
39
1 TN 2026-11-05 20:09 UTC 2026-11-05 20:09 UTC

Showing 1-25 of 87152 indicators