IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 13.140.155.222 ip

Score
100
/100
raw: 147.7
Reports
18
Last Reported
2026-11-04 08:19 UTC
Categories
Scanning (11) Config Exposure Probe (7)

Network details

ASN
51167
Organization
Contabo GmbH
Country
FR

Threat Intelligence enriched 2026-11-04 08:19 UTC

Reverse DNS
vmi3702138.contaboserver.net
DNSBL Status
Clean

Sensor Activity last 18 events

Time (UTC) Trap Signal Method Path Flags
2026-11-04 08:18 UTC catch-all-suspicious direct GET /server/config/serviceAccountKey.json burst
2026-11-04 08:18 UTC catch-all-config direct GET /.env.prod burst
2026-11-04 08:18 UTC catch-all-config direct GET /.env.staging burst
2026-11-04 08:18 UTC dot-env direct GET /.env burst
2026-11-04 08:18 UTC catch-all-config direct GET /.env.example burst
2026-11-04 08:18 UTC catch-all-config direct GET /.env.production burst
2026-11-04 08:18 UTC catch-all-config direct GET /.env.local burst
2026-11-04 08:18 UTC catch-all-scan direct GET /env.sample burst
2026-11-04 08:18 UTC catch-all-suspicious direct GET /‎credentials.json.example burst
2026-11-04 08:18 UTC catch-all-suspicious direct GET /data/credentials.json burst
2026-11-04 08:18 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-04 08:18 UTC catch-all-suspicious direct GET /credentials.json burst
2026-11-04 08:18 UTC catch-all-suspicious direct GET /backend/serviceAccountKey.json burst
2026-11-04 08:18 UTC catch-all-suspicious direct GET /backend/config/serviceAccountKey.json burst
2026-11-04 08:18 UTC catch-all-config direct GET /.env-example
2026-11-04 08:18 UTC catch-all-suspicious direct GET /config/secrets.json
2026-11-04 08:18 UTC catch-all-suspicious direct GET /server/serviceAccountKey.json
2026-11-04 08:18 UTC catch-all-suspicious direct GET /serviceAccountKey.json

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
85.208.51.193 ip
100
 6 FR 2026-11-04 09:17 UTC 2026-11-04 09:16 UTC
46.201.78.167 ip
78
 3 UA 2026-11-04 09:01 UTC 2026-11-04 09:01 UTC
196.188.34.120 ip
97
 6 ET 2026-11-04 09:02 UTC 2026-11-04 09:01 UTC
103.138.123.134 ip
70
 2 BD 2026-11-04 09:01 UTC 2026-11-04 09:01 UTC
179.60.56.34 ip
63
 2 EC 2026-11-04 09:01 UTC 2026-11-04 09:01 UTC
114.27.136.214 ip
98
 7 TW 2026-11-04 09:02 UTC 2026-11-04 09:01 UTC
119.92.79.220 ip
100
 17 PH 2026-11-04 09:01 UTC 2026-11-04 08:58 UTC
91.102.178.141 ip
100
 20 UA 2026-11-04 09:01 UTC 2026-11-04 08:58 UTC
169.224.125.162 ip
100
 18 IQ 2026-11-04 09:01 UTC 2026-11-04 08:58 UTC
103.115.243.135 ip
82
 3 BD 2026-11-04 08:58 UTC 2026-11-04 08:58 UTC
216.36.112.159 ip
100
 45 US 2026-11-04 09:02 UTC 2026-11-04 08:57 UTC
196.189.24.210 ip
100
 9 ET 2026-11-04 08:57 UTC 2026-11-04 08:56 UTC
170.82.210.145 ip
99
 9 TT 2026-11-04 08:57 UTC 2026-11-04 08:56 UTC
204.157.182.254 ip
100
 8 IQ 2026-11-04 08:57 UTC 2026-11-04 08:56 UTC
103.249.243.66 ip
100
 24 IN 2026-11-04 08:56 UTC 2026-11-04 08:53 UTC
185.23.8.176 ip
100
 22 RU 2026-11-04 08:56 UTC 2026-11-04 08:53 UTC
223.123.34.176 ip
18
 1 PK 2026-11-04 08:47 UTC 2026-11-04 08:47 UTC
172.71.247.125 ip
70
 2 US 2026-11-04 08:46 UTC 2026-11-04 08:46 UTC
159.65.173.138 ip
18
 1 US 2026-11-04 08:40 UTC 2026-11-04 08:40 UTC
134.199.151.17 ip
100
 11 AU 2026-11-04 09:16 UTC 2026-11-04 08:40 UTC
200.162.155.98 ip
100
 12 BA 2026-11-04 08:37 UTC 2026-11-04 08:37 UTC
172.64.198.165 ip
75
 2 PL 2026-11-04 08:29 UTC 2026-11-04 08:29 UTC
118.92.16.202 ip
100
 10 NZ 2026-11-04 08:26 UTC 2026-11-04 08:25 UTC
31.41.94.66 ip
100
 13 UA 2026-11-04 08:26 UTC 2026-11-04 08:24 UTC
103.171.36.186 ip
100
 12 BD 2026-11-04 08:26 UTC 2026-11-04 08:24 UTC

Showing 1-25 of 86547 indicators