Skip to content

Hostname

bad-behavior.net

Last fetched

bad-behavior.net resolves to 3 IPv4 addresses operated by CLOUDFLARENET - Cloudflare, Inc. in CA. WHOIS lists iana:303 as the registrar.

Nutrition Label

WHISPER CANON · bad-behavior.netRouting diversity2.4/10Peering density10.0/10MOAS conflict✓ noneThreat-feed listings10.0/10WHOIS transparency10.0/10Resolver footprint3.2/10canon.whisper.security/host/bad-behavior.net

Resolution chain

bad-behavior.net resolves to 3 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
104.26.6.168104.26.0.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA
104.26.7.168104.26.0.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA
172.67.71.133172.67.64.0/20AS13335CLOUDFLARENET - Cloudflare, Inc.CA

WHOIS identity

Registrar
iana:303
Organization
domain admin
Contact emails

Subdomains

6 observed subdomains of bad-behavior.net.

Subdomain
cpanel.bad-behavior.net
cpcalendars.bad-behavior.net
cpcontacts.bad-behavior.net
mail.bad-behavior.net
store.bad-behavior.net
www.bad-behavior.net

Web-graph footprint

Distinct hostnames that link to or from bad-behavior.net in the public web crawl.

290 sites link to this hostname.

18 sites linked to from this hostname.

Sample inbound links

Sample outbound links

Threat posture

History

Mail and authentication

MX records

SPF policy

3 SPF mechanisms authorising senders for bad-behavior.net.

MechanismTarget
SPF_Abad-behavior.net
SPF_IP198.20.127.197
SPF_MXbad-behavior.net

Related pages

Pivot deeper into the graph from bad-behavior.net.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "bad-behavior.net"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.