IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 169.58.74.146 ip
Score
100
/100
raw: 324.34
Reports
35
Last Reported
2026-11-09 13:57 UTC
Categories
Scanning (18)
Config Exposure Probe (14)
Admin Panel Probe (2)
Web Stack Probe (1)
Network details
ASN
51167
Organization
Contabo GmbH
Country
FR
Threat Intelligence enriched 2026-11-09 13:57 UTC
Reverse DNS
vmi3702148.contaboserver.net
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-09 13:56 UTC | catch-all-scan | direct | GET | /backend/env.example.txt | burst |
| 2026-11-09 13:56 UTC | catch-all-config | direct | GET | /azure.env | burst |
| 2026-11-09 13:56 UTC | catch-all-scan | direct | GET | /src/llm/azure_openai.py | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /config/secrets.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /firebase-service-account.json | burst |
| 2026-11-09 13:56 UTC | catch-all-admin | direct | GET | /firebase-adminsdk.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /fb.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /google-credentials.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /auth.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /key.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /storage/service-account.json | burst |
| 2026-11-09 13:56 UTC | uploads | direct | GET | /uploads/gcp.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /storage/credentials.json | burst |
| 2026-11-09 13:56 UTC | wp-content | direct | GET | /wp-content/uploads/credentials.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /secrets/credentials.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /backend/config.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /.well-known/gcp-keys.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /server/credentials.json | burst |
| 2026-11-09 13:56 UTC | catch-all-suspicious | direct | GET | /backup.json | burst |
| 2026-11-09 13:56 UTC | catch-all-config | direct | GET | /.[host] | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 31.169.53.6 | ip |
100
|
27 | NO | 2026-11-09 14:56 UTC | 2026-11-09 14:54 UTC |
| 103.87.24.103 | ip |
50
|
1 | IN | 2026-11-09 14:54 UTC | 2026-11-09 14:54 UTC |
| 124.29.253.45 | ip |
50
|
1 | PK | 2026-11-09 14:54 UTC | 2026-11-09 14:54 UTC |
| 200.138.46.149 | ip |
39
|
1 | AE | 2026-11-09 14:52 UTC | 2026-11-09 14:52 UTC |
| 106.192.132.191 | ip |
50
|
1 | IN | 2026-11-09 14:51 UTC | 2026-11-09 14:51 UTC |
| 190.24.143.44 | ip |
50
|
1 | CO | 2026-11-09 14:50 UTC | 2026-11-09 14:50 UTC |
| 193.39.118.211 | ip |
50
|
1 | UA | 2026-11-09 14:50 UTC | 2026-11-09 14:50 UTC |
| 122.183.49.19 | ip |
50
|
1 | IN | 2026-11-09 14:49 UTC | 2026-11-09 14:49 UTC |
| 47.15.186.188 | ip |
50
|
1 | IN | 2026-11-09 14:47 UTC | 2026-11-09 14:47 UTC |
| 102.180.242.127 | ip |
50
|
1 | BF | 2026-11-09 14:47 UTC | 2026-11-09 14:47 UTC |
| 171.234.9.86 | ip |
50
|
1 | VN | 2026-11-09 14:46 UTC | 2026-11-09 14:46 UTC |
| 91.235.225.167 | ip |
50
|
1 | UA | 2026-11-09 14:46 UTC | 2026-11-09 14:46 UTC |
| 152.172.89.213 | ip |
50
|
1 | CL | 2026-11-09 14:44 UTC | 2026-11-09 14:44 UTC |
| 103.172.152.85 | ip |
50
|
1 | IN | 2026-11-09 14:43 UTC | 2026-11-09 14:43 UTC |
| 203.76.221.35 | ip |
50
|
1 | BD | 2026-11-09 14:43 UTC | 2026-11-09 14:43 UTC |
| 125.238.98.180 | ip |
50
|
1 | NZ | 2026-11-09 14:43 UTC | 2026-11-09 14:43 UTC |
| 183.88.54.106 | ip |
50
|
1 | TH | 2026-11-09 14:43 UTC | 2026-11-09 14:43 UTC |
| 177.231.71.120 | ip |
50
|
1 | MX | 2026-11-09 14:43 UTC | 2026-11-09 14:43 UTC |
| 31.134.14.184 | ip |
50
|
1 | SC | 2026-11-09 14:12 UTC | 2026-11-09 14:12 UTC |
| 69.5.169.162 | ip |
39
|
1 | DE | 2026-11-09 14:08 UTC | 2026-11-09 14:08 UTC |
| 23.234.103.212 | ip |
100
|
112 | US | 2026-11-09 14:54 UTC | 2026-11-09 14:08 UTC |
| 169.58.74.146 | ip |
100
|
35 | FR | 2026-11-09 13:57 UTC | 2026-11-09 13:57 UTC |
| 68.183.15.123 | ip |
94
|
4 | NL | 2026-11-09 13:56 UTC | 2026-11-09 13:56 UTC |
| 51.81.165.208 | ip |
18
|
1 | US | 2026-11-09 13:50 UTC | 2026-11-09 13:50 UTC |
| 136.110.59.103 | ip |
39
|
1 | SG | 2026-11-09 13:40 UTC | 2026-11-09 13:40 UTC |
Showing 1-25 of 90244 indicators