IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 5.253.235.41 ip

Score
100
/100
raw: 1578.06
Reports
169
Last Reported
2026-11-14 07:33 UTC
Categories
Scanning (107) Config Exposure Probe (53) Admin Panel Probe (3) Web Stack Probe (3) API Probe (3)

Network details

ASN
51167
Organization
Contabo GmbH
Country
FR

Threat Intelligence enriched 2026-11-14 07:33 UTC

Reverse DNS
vmi3733688.contaboserver.net
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-14 07:33 UTC catch-all-scan direct GET /settings.py burst
2026-11-14 07:33 UTC catch-all-config direct GET /test/.env burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /gcp-credentials.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /google-services.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /gcloud-key.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /vertex-ai-key.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /serverless.yml burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /aws.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /aws-config.json burst
2026-11-14 07:33 UTC catch-all-scan direct GET /aws-exports.js burst
2026-11-14 07:33 UTC aws-creds direct GET /.aws/config burst
2026-11-14 07:33 UTC catch-all-config direct GET /.env.development.local burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /.config/gcloud/application_default_credentials.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /application_default_credentials.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /azure-deploy.json burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /vite.config.ts burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /next.config.js burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /vite.config.js burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /config.yml burst
2026-11-14 07:33 UTC catch-all-suspicious direct GET /config.yaml burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
175.141.177.140 ip
50
 1 MY 2026-11-14 07:50 UTC 2026-11-14 07:50 UTC
210.87.70.2 ip
39
 1 BD 2026-11-14 07:50 UTC 2026-11-14 07:50 UTC
198.163.193.62 ip
50
 1 UZ 2026-11-14 07:50 UTC 2026-11-14 07:50 UTC
62.118.97.93 ip
50
 1 RU 2026-11-14 07:50 UTC 2026-11-14 07:50 UTC
189.6.232.24 ip
39
 1 BR 2026-11-14 07:49 UTC 2026-11-14 07:49 UTC
143.110.247.45 ip
18
 1 IN 2026-11-14 07:49 UTC 2026-11-14 07:49 UTC
102.206.206.86 ip
50
 1 KE 2026-11-14 07:48 UTC 2026-11-14 07:48 UTC
176.240.248.246 ip
39
 1 TR 2026-11-14 07:48 UTC 2026-11-14 07:48 UTC
119.152.40.78 ip
50
 1 PK 2026-11-14 07:47 UTC 2026-11-14 07:47 UTC
179.60.80.208 ip
39
 1 CL 2026-11-14 07:46 UTC 2026-11-14 07:46 UTC
20.65.202.19 ip
18
 1 US 2026-11-14 07:46 UTC 2026-11-14 07:46 UTC
213.230.78.202 ip
50
 1 UZ 2026-11-14 07:45 UTC 2026-11-14 07:45 UTC
162.158.86.33 ip
70
 2 DE 2026-11-14 07:45 UTC 2026-11-14 07:45 UTC
168.232.221.91 ip
39
 1 BR 2026-11-14 07:45 UTC 2026-11-14 07:45 UTC
20.84.89.37 ip
18
 1 US 2026-11-14 07:45 UTC 2026-11-14 07:45 UTC
190.9.65.147 ip
39
 1 BR 2026-11-14 07:45 UTC 2026-11-14 07:45 UTC
69.160.102.212 ip
39
 1 JM 2026-11-14 07:45 UTC 2026-11-14 07:45 UTC
196.224.223.112 ip
39
 1 TN 2026-11-14 07:44 UTC 2026-11-14 07:44 UTC
201.77.73.206 ip
39
 1 BR 2026-11-14 07:44 UTC 2026-11-14 07:44 UTC
118.101.170.166 ip
50
 1 MY 2026-11-14 07:44 UTC 2026-11-14 07:44 UTC
102.209.254.71 ip
39
 1 LY 2026-11-14 07:43 UTC 2026-11-14 07:43 UTC
113.173.77.88 ip
39
 1 VN 2026-11-14 07:43 UTC 2026-11-14 07:43 UTC
161.142.156.188 ip
39
 1 MY 2026-11-14 07:42 UTC 2026-11-14 07:42 UTC
38.68.183.41 ip
39
 1 VE 2026-11-14 07:42 UTC 2026-11-14 07:42 UTC
103.109.239.251 ip
50
 1 BD 2026-11-14 07:41 UTC 2026-11-14 07:41 UTC

Showing 1-25 of 101231 indicators