IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 5.253.235.88 ip

Score
100
/100
raw: 1535.23
Reports
165
Last Reported
2026-11-15 17:13 UTC
Categories
Scanning (106) Config Exposure Probe (50) Admin Panel Probe (3) API Probe (3) Web Stack Probe (3)

Network details

ASN
51167
Organization
Contabo GmbH
Country
FR

Threat Intelligence enriched 2026-11-15 17:13 UTC

Reverse DNS
vmi3733700.contaboserver.net
DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-15 17:12 UTC catch-all-config direct GET /beta/.env burst
2026-11-15 17:12 UTC catch-all-config direct GET /staging/.env burst
2026-11-15 17:12 UTC catch-all-config direct GET /main/.env burst
2026-11-15 17:12 UTC catch-all-config direct GET /app/.env burst
2026-11-15 17:12 UTC catch-all-config direct GET /apis/.env burst
2026-11-15 17:12 UTC api direct GET /api/.env burst
2026-11-15 17:12 UTC catch-all-config direct GET /server/.env burst
2026-11-15 17:12 UTC catch-all-config direct GET /dev/.env burst
2026-11-15 17:12 UTC catch-all-suspicious direct GET /appsettings.Production.json burst
2026-11-15 17:12 UTC catch-all-suspicious direct GET /web.config burst
2026-11-15 17:12 UTC catch-all-scan direct GET /Samples/env burst
2026-11-15 17:12 UTC catch-all-suspicious direct GET /config.json burst
2026-11-15 17:12 UTC catch-all-suspicious direct GET /appsettings.Development.json burst
2026-11-15 17:12 UTC catch-all-config direct GET /backend/.env.backup burst
2026-11-15 17:12 UTC catch-all-config direct GET /azure/.env burst
2026-11-15 17:12 UTC catch-all-suspicious direct GET /application.yml burst
2026-11-15 17:12 UTC catch-all-scan direct GET /application-dev.properties burst
2026-11-15 17:12 UTC catch-all-suspicious direct GET /config/application.yml burst
2026-11-15 17:12 UTC wp-config direct GET /wp-config.php burst
2026-11-15 17:12 UTC wp-config-backup direct GET /wp-config.php.bak burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
196.65.59.137 ip
50
 1 MA 2026-11-15 17:28 UTC 2026-11-15 17:28 UTC
194.36.81.15 ip
39
 1 UA 2026-11-15 17:27 UTC 2026-11-15 17:27 UTC
103.178.191.170 ip
39
 1 BD 2026-11-15 17:27 UTC 2026-11-15 17:27 UTC
196.188.231.116 ip
50
 1 ET 2026-11-15 17:27 UTC 2026-11-15 17:27 UTC
203.124.62.197 ip
50
 1 PK 2026-11-15 17:27 UTC 2026-11-15 17:27 UTC
103.141.174.227 ip
50
 1 BD 2026-11-15 17:27 UTC 2026-11-15 17:27 UTC
2.91.242.195 ip
39
 1 SA 2026-11-15 17:27 UTC 2026-11-15 17:27 UTC
190.97.227.245 ip
39
 1 VE 2026-11-15 17:26 UTC 2026-11-15 17:26 UTC
213.172.149.51 ip
88
 3 ZA 2026-11-15 17:27 UTC 2026-11-15 17:26 UTC
195.211.253.172 ip
50
 1 UA 2026-11-15 17:25 UTC 2026-11-15 17:25 UTC
37.236.10.180 ip
39
 1 IQ 2026-11-15 17:24 UTC 2026-11-15 17:24 UTC
78.181.110.32 ip
50
 1 TR 2026-11-15 17:24 UTC 2026-11-15 17:24 UTC
118.179.64.20 ip
39
 1 BD 2026-11-15 17:23 UTC 2026-11-15 17:23 UTC
188.130.148.78 ip
39
 1 RU 2026-11-15 17:22 UTC 2026-11-15 17:22 UTC
190.107.236.97 ip
50
 1 EC 2026-11-15 17:22 UTC 2026-11-15 17:22 UTC
181.41.199.162 ip
50
 1 PY 2026-11-15 17:21 UTC 2026-11-15 17:21 UTC
163.223.244.132 ip
50
 1 IN 2026-11-15 17:21 UTC 2026-11-15 17:21 UTC
152.58.33.214 ip
50
 1 IN 2026-11-15 17:20 UTC 2026-11-15 17:20 UTC
213.195.83.230 ip
50
 1 ES 2026-11-15 17:20 UTC 2026-11-15 17:20 UTC
176.98.71.164 ip
39
 1 UA 2026-11-15 17:20 UTC 2026-11-15 17:20 UTC
94.158.58.133 ip
50
 1 UZ 2026-11-15 17:18 UTC 2026-11-15 17:18 UTC
190.247.33.54 ip
39
 1 AR 2026-11-15 17:17 UTC 2026-11-15 17:17 UTC
34.158.58.101 ip
39
 1 SG 2026-11-15 17:17 UTC 2026-11-15 17:17 UTC
212.47.150.215 ip
50
 1 AZ 2026-11-15 17:17 UTC 2026-11-15 17:17 UTC
189.28.83.225 ip
50
 1 BO 2026-11-15 17:16 UTC 2026-11-15 17:16 UTC

Showing 1-25 of 105506 indicators