IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 172.70.80.40 ip
Score
100
/100
raw: 90.79
Reports
12
Last Reported
2026-11-03 01:15 UTC
Categories
Scanning (5)
Admin Panel Probe (3)
API Probe (3)
Web Stack Probe (1)
Network details
ASN
13335
Organization
Cloudflare, Inc.
Country
CA
Threat Intelligence enriched 2026-11-03 01:14 UTC
DNSBL Status
Clean
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-03 01:15 UTC | wp-json | direct | GET | / | burst |
| 2026-11-03 01:15 UTC | catch-all-scan | direct | GET | /@vite/env | burst |
| 2026-11-03 01:15 UTC | catch-all-scan | direct | GET | /trace.axd | burst |
| 2026-11-03 01:15 UTC | catch-all-script | direct | GET | /info.php | burst |
| 2026-11-03 01:15 UTC | debug-panel | direct | GET | /telescope/requests | burst |
| 2026-11-03 01:15 UTC | catch-all-suspicious | direct | GET | /config.json | burst |
| 2026-11-03 01:15 UTC | catch-all-scan | direct | GET | /s/731313e25313e21323e2430313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties | burst |
| 2026-11-03 01:15 UTC | catch-all-infra | direct | POST | /graphql/api | |
| 2026-11-03 01:15 UTC | api | direct | POST | /api/graphql | |
| 2026-11-03 01:15 UTC | api | direct | POST | /api | |
| 2026-11-03 01:14 UTC | webmail | direct | GET | /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application | |
| 2026-11-03 01:14 UTC | catch-all-admin | direct | GET | /console/ |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 165.165.92.176 | ip |
39
|
1 | ZA | 2026-11-03 02:22 UTC | 2026-11-03 02:22 UTC |
| 190.6.35.14 | ip |
50
|
1 | VE | 2026-11-03 02:21 UTC | 2026-11-03 02:21 UTC |
| 116.110.43.62 | ip |
50
|
1 | VN | 2026-11-03 02:21 UTC | 2026-11-03 02:21 UTC |
| 138.99.33.222 | ip |
39
|
1 | BR | 2026-11-03 02:21 UTC | 2026-11-03 02:21 UTC |
| 193.233.6.84 | ip |
50
|
1 | RU | 2026-11-03 02:20 UTC | 2026-11-03 02:20 UTC |
| 45.170.198.83 | ip |
39
|
1 | BR | 2026-11-03 02:19 UTC | 2026-11-03 02:19 UTC |
| 154.244.238.124 | ip |
39
|
1 | DZ | 2026-11-03 02:19 UTC | 2026-11-03 02:19 UTC |
| 79.37.56.2 | ip |
50
|
1 | IT | 2026-11-03 02:19 UTC | 2026-11-03 02:19 UTC |
| 36.255.44.131 | ip |
39
|
1 | PK | 2026-11-03 02:18 UTC | 2026-11-03 02:18 UTC |
| 187.189.114.206 | ip |
39
|
1 | MX | 2026-11-03 02:18 UTC | 2026-11-03 02:18 UTC |
| 66.9.168.177 | ip |
50
|
1 | HT | 2026-11-03 02:17 UTC | 2026-11-03 02:17 UTC |
| 188.163.68.23 | ip |
39
|
1 | UA | 2026-11-03 02:16 UTC | 2026-11-03 02:16 UTC |
| 113.211.208.116 | ip |
39
|
1 | MY | 2026-11-03 02:16 UTC | 2026-11-03 02:16 UTC |
| 189.248.85.29 | ip |
39
|
1 | MX | 2026-11-03 02:16 UTC | 2026-11-03 02:16 UTC |
| 42.98.79.67 | ip |
50
|
1 | HK | 2026-11-03 02:15 UTC | 2026-11-03 02:15 UTC |
| 31.56.209.44 | ip |
100
|
21 | NL | 2026-11-03 02:14 UTC | 2026-11-03 02:14 UTC |
| 91.226.254.117 | ip |
39
|
1 | UA | 2026-11-03 02:14 UTC | 2026-11-03 02:14 UTC |
| 60.50.162.59 | ip |
50
|
1 | MY | 2026-11-03 02:14 UTC | 2026-11-03 02:14 UTC |
| 177.227.60.249 | ip |
50
|
1 | MX | 2026-11-03 02:13 UTC | 2026-11-03 02:13 UTC |
| 109.252.145.199 | ip |
50
|
1 | RU | 2026-11-03 02:13 UTC | 2026-11-03 02:13 UTC |
| 143.44.133.185 | ip |
39
|
1 | PH | 2026-11-03 02:12 UTC | 2026-11-03 02:12 UTC |
| 46.63.125.105 | ip |
39
|
1 | UA | 2026-11-03 02:12 UTC | 2026-11-03 02:12 UTC |
| 178.165.33.166 | ip |
39
|
1 | UA | 2026-11-03 02:12 UTC | 2026-11-03 02:12 UTC |
| 38.61.210.205 | ip |
39
|
1 | VE | 2026-11-03 02:12 UTC | 2026-11-03 02:12 UTC |
| 14.239.59.216 | ip |
50
|
1 | VN | 2026-11-03 02:11 UTC | 2026-11-03 02:11 UTC |
Showing 1-25 of 85428 indicators