IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 13.140.167.131 ip

Score
100
/100
raw: 268.63
Reports
32
Last Reported
2026-11-08 22:27 UTC
Categories
Scanning (27) Admin Panel Probe (3) API Probe (1) Config Exposure Probe (1)

Network details

ASN
51167
Organization
Contabo GmbH
Country
FR

Threat Intelligence enriched 2026-11-08 22:27 UTC

Reverse DNS
vmi3702143.contaboserver.net
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-08 22:27 UTC catch-all-suspicious direct GET /lit.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /vertex_ai_service_account.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.credential.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.runtimeconfig.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /deployment/firebase/.secrets.example.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.gcp-service-account.json burst
2026-11-08 22:27 UTC catch-all-admin direct GET /.admin-cred.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.example.firebase-credentials.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /temp-vertex-key.json burst
2026-11-08 22:27 UTC catch-all-admin direct GET /admin-cred.json burst
2026-11-08 22:27 UTC catch-all-admin direct GET /.firebase-admin.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /frontend/.secret-firestore.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /google.json burst
2026-11-08 22:27 UTC catch-all-config direct GET /.envrc.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /config.example.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.fb_key.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.service_account.sample.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /.firebase-creds-template.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /backend/serviceAccountKey.json burst
2026-11-08 22:27 UTC catch-all-suspicious direct GET /credentials.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
142.93.20.188 ip
93
 4 US 2026-11-08 23:07 UTC 2026-11-08 23:07 UTC
152.59.47.74 ip
39
 1 IN 2026-11-08 23:07 UTC 2026-11-08 23:07 UTC
36.70.18.218 ip
39
 1 ID 2026-11-08 23:06 UTC 2026-11-08 23:06 UTC
190.5.49.113 ip
39
 1 CL 2026-11-08 23:06 UTC 2026-11-08 23:06 UTC
181.20.12.177 ip
50
 1 AR 2026-11-08 23:06 UTC 2026-11-08 23:06 UTC
88.168.142.116 ip
50
 1 FR 2026-11-08 23:05 UTC 2026-11-08 23:05 UTC
185.117.103.121 ip
50
 1 UA 2026-11-08 23:04 UTC 2026-11-08 23:04 UTC
186.125.8.97 ip
39
 1 AR 2026-11-08 23:03 UTC 2026-11-08 23:03 UTC
167.88.167.23 ip
100
 31 US 2026-11-08 23:04 UTC 2026-11-08 23:02 UTC
187.223.247.240 ip
50
 1 MX 2026-11-08 23:02 UTC 2026-11-08 23:02 UTC
79.117.187.97 ip
39
 1 ES 2026-11-08 23:01 UTC 2026-11-08 23:01 UTC
168.90.129.177 ip
50
 1 AR 2026-11-08 22:59 UTC 2026-11-08 22:59 UTC
178.205.106.118 ip
50
 1 RU 2026-11-08 22:59 UTC 2026-11-08 22:59 UTC
169.224.33.53 ip
39
 1 IQ 2026-11-08 22:59 UTC 2026-11-08 22:59 UTC
105.157.251.201 ip
50
 1 MA 2026-11-08 22:58 UTC 2026-11-08 22:58 UTC
148.222.205.82 ip
50
 1 CL 2026-11-08 22:57 UTC 2026-11-08 22:57 UTC
188.162.74.32 ip
39
 1 RU 2026-11-08 22:55 UTC 2026-11-08 22:55 UTC
91.221.210.47 ip
50
 1 UA 2026-11-08 22:55 UTC 2026-11-08 22:55 UTC
189.217.207.124 ip
39
 1 MX 2026-11-08 22:55 UTC 2026-11-08 22:55 UTC
2.27.123.2 ip
39
 1 FI 2026-11-08 22:53 UTC 2026-11-08 22:53 UTC
103.166.58.211 ip
39
 1 BD 2026-11-08 22:52 UTC 2026-11-08 22:52 UTC
169.224.9.162 ip
39
 1 IQ 2026-11-08 22:50 UTC 2026-11-08 22:50 UTC
89.151.170.145 ip
39
 1 RU 2026-11-08 22:50 UTC 2026-11-08 22:50 UTC
88.181.112.176 ip
50
 1 FR 2026-11-08 22:50 UTC 2026-11-08 22:50 UTC
200.28.251.136 ip
39
 1 CL 2026-11-08 22:49 UTC 2026-11-08 22:49 UTC

Showing 1-25 of 89427 indicators