IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 172.104.17.116 ip
Score
0
/100
raw: 0.01
Reports
7
Last Reported
2026-05-09 18:33 UTC
Categories
Config Exposure Probe (4)
Scanning (3)
Network details
ASN
63949
Organization
Akamai Connected Cloud
Country
JP
Threat Intelligence enriched 2026-05-09 18:33 UTC
Reverse DNS
172-104-17-116.ip.linodeusercontent.com
Sensor Activity last 7 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-05-09 18:32 UTC | catch-all-config | direct | GET | /.env.bak | burst | EU West Sensor 4 |
| 2026-05-09 18:32 UTC | catch-all-config | direct | GET | /.env.local | burst | EU West Sensor 4 |
| 2026-05-09 18:32 UTC | catch-all-suspicious | direct | GET | /config.js | burst | EU West Sensor 4 |
| 2026-05-09 18:32 UTC | dot-env | direct | GET | /.env | EU West Sensor 4 | |
| 2026-05-09 18:32 UTC | catch-all-suspicious | direct | GET | /config.json | EU West Sensor 4 | |
| 2026-05-09 18:32 UTC | catch-all-suspicious | direct | GET | /.bash_history | EU West Sensor 4 | |
| 2026-05-09 18:32 UTC | docker-compose | direct | GET | /docker-compose.yml | EU West Sensor 4 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 77.120.57.90 | ip |
50
|
1 | RU | 2026-11-02 13:51 UTC | 2026-11-02 13:51 UTC |
| 152.59.158.205 | ip |
39
|
1 | IN | 2026-11-02 13:49 UTC | 2026-11-02 13:49 UTC |
| 200.123.52.130 | ip |
39
|
1 | AR | 2026-11-02 13:49 UTC | 2026-11-02 13:49 UTC |
| 102.209.222.201 | ip |
39
|
1 | CI | 2026-11-02 13:48 UTC | 2026-11-02 13:48 UTC |
| 93.171.38.86 | ip |
50
|
1 | RU | 2026-11-02 13:48 UTC | 2026-11-02 13:48 UTC |
| 5.83.213.213 | ip |
39
|
1 | AZ | 2026-11-02 13:48 UTC | 2026-11-02 13:48 UTC |
| 122.168.2.6 | ip |
39
|
1 | IN | 2026-11-02 13:47 UTC | 2026-11-02 13:47 UTC |
| 193.104.145.19 | ip |
39
|
1 | UA | 2026-11-02 13:47 UTC | 2026-11-02 13:47 UTC |
| 27.130.196.222 | ip |
50
|
1 | TH | 2026-11-02 13:47 UTC | 2026-11-02 13:47 UTC |
| 38.183.12.15 | ip |
39
|
1 | IN | 2026-11-02 13:46 UTC | 2026-11-02 13:46 UTC |
| 59.176.125.162 | ip |
39
|
1 | IN | 2026-11-02 13:46 UTC | 2026-11-02 13:46 UTC |
| 91.219.254.81 | ip |
50
|
1 | UA | 2026-11-02 13:46 UTC | 2026-11-02 13:46 UTC |
| 41.225.215.130 | ip |
50
|
1 | TN | 2026-11-02 13:46 UTC | 2026-11-02 13:46 UTC |
| 103.134.218.235 | ip |
50
|
1 | NP | 2026-11-02 13:45 UTC | 2026-11-02 13:45 UTC |
| 201.188.26.21 | ip |
50
|
1 | CL | 2026-11-02 13:45 UTC | 2026-11-02 13:45 UTC |
| 165.22.166.160 | ip |
70
|
2 | CA | 2026-11-02 13:45 UTC | 2026-11-02 13:44 UTC |
| 103.99.197.178 | ip |
39
|
1 | IN | 2026-11-02 13:43 UTC | 2026-11-02 13:43 UTC |
| 179.48.231.59 | ip |
50
|
1 | BR | 2026-11-02 13:42 UTC | 2026-11-02 13:42 UTC |
| 154.41.187.82 | ip |
39
|
1 | VE | 2026-11-02 13:42 UTC | 2026-11-02 13:42 UTC |
| 180.75.242.61 | ip |
50
|
1 | MY | 2026-11-02 13:41 UTC | 2026-11-02 13:41 UTC |
| 191.242.37.220 | ip |
50
|
1 | BR | 2026-11-02 13:41 UTC | 2026-11-02 13:41 UTC |
| 187.189.173.80 | ip |
39
|
1 | MX | 2026-11-02 13:41 UTC | 2026-11-02 13:41 UTC |
| 77.233.15.100 | ip |
39
|
1 | RU | 2026-11-02 13:40 UTC | 2026-11-02 13:40 UTC |
| 45.138.12.103 | ip |
100
|
28 | BG | 2026-11-02 13:42 UTC | 2026-11-02 13:40 UTC |
| 103.132.183.117 | ip |
50
|
1 | BD | 2026-11-02 13:40 UTC | 2026-11-02 13:40 UTC |
Showing 1-25 of 83768 indicators