IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 51.159.125.199 ip
Score
15
/100
raw: 1.63
Reports
24
Last Reported
2026-08-24 06:57 UTC
Categories
Scanning (18)
Admin Panel Probe (6)
Network details
ASN
12876
Organization
Scaleway SAS
Country
FR
Threat Intelligence enriched 2026-11-04 17:07 UTC
Reverse DNS
monet-04.crawler.deepfield.net
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-08-18 11:53 UTC | catch-all-scan | direct | GET | /login.html | burst |
| 2026-08-18 11:53 UTC | catch-all-scan | direct | GET | /login.htm | burst |
| 2026-08-18 11:53 UTC | catch-all-script | direct | GET | /cgi-bin/login.cgi | burst |
| 2026-08-18 11:52 UTC | admin | direct | GET | /admin/index.html | |
| 2026-08-11 13:36 UTC | catch-all-scan | direct | GET | /login.html | burst |
| 2026-08-11 13:35 UTC | catch-all-scan | direct | GET | /login.htm | burst |
| 2026-08-11 13:35 UTC | catch-all-script | direct | GET | /cgi-bin/login.cgi | burst |
| 2026-08-11 13:35 UTC | admin | direct | GET | /admin/index.html | |
| 2026-08-10 17:10 UTC | catch-all-scan | direct | GET | /login.html | burst |
| 2026-08-10 17:09 UTC | catch-all-scan | direct | GET | /login.htm | burst |
| 2026-08-10 17:09 UTC | catch-all-script | direct | GET | /cgi-bin/login.cgi | burst |
| 2026-08-10 17:09 UTC | admin | direct | GET | /admin/index.html |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 31.134.14.184 | ip |
50
|
1 | SC | 2026-11-09 14:12 UTC | 2026-11-09 14:12 UTC |
| 69.5.169.162 | ip |
39
|
1 | DE | 2026-11-09 14:08 UTC | 2026-11-09 14:08 UTC |
| 23.234.103.212 | ip |
100
|
75 | US | 2026-11-09 14:28 UTC | 2026-11-09 14:08 UTC |
| 169.58.74.146 | ip |
100
|
35 | FR | 2026-11-09 13:57 UTC | 2026-11-09 13:57 UTC |
| 68.183.15.123 | ip |
94
|
4 | NL | 2026-11-09 13:56 UTC | 2026-11-09 13:56 UTC |
| 51.81.165.208 | ip |
18
|
1 | US | 2026-11-09 13:50 UTC | 2026-11-09 13:50 UTC |
| 136.110.59.103 | ip |
39
|
1 | SG | 2026-11-09 13:40 UTC | 2026-11-09 13:40 UTC |
| 175.24.73.57 | ip |
33
|
2 | CN | 2026-11-09 13:17 UTC | 2026-11-09 13:17 UTC |
| 46.216.225.28 | ip |
55
|
1 | BY | 2026-11-09 12:59 UTC | 2026-11-09 12:59 UTC |
| 143.255.84.189 | ip |
39
|
1 | VE | 2026-11-09 12:40 UTC | 2026-11-09 12:40 UTC |
| 186.57.213.25 | ip |
39
|
1 | AR | 2026-11-09 12:39 UTC | 2026-11-09 12:39 UTC |
| 194.44.50.87 | ip |
70
|
2 | UA | 2026-11-09 12:39 UTC | 2026-11-09 12:39 UTC |
| 114.119.130.99 | ip |
18
|
1 | SG | 2026-11-09 12:26 UTC | 2026-11-09 12:26 UTC |
| 64.205.72.196 | ip |
39
|
1 | US | 2026-11-09 12:10 UTC | 2026-11-09 12:10 UTC |
| 188.132.150.51 | ip |
70
|
2 | TR | 2026-11-09 12:03 UTC | 2026-11-09 12:03 UTC |
| 138.59.142.184 | ip |
39
|
1 | AR | 2026-11-09 12:03 UTC | 2026-11-09 12:03 UTC |
| 85.208.96.195 | ip |
33
|
2 | US | 2026-11-09 11:58 UTC | 2026-11-09 11:58 UTC |
| 167.172.30.140 | ip |
100
|
10 | US | 2026-11-09 11:55 UTC | 2026-11-09 11:54 UTC |
| 79.103.19.19 | ip |
39
|
1 | GR | 2026-11-09 11:47 UTC | 2026-11-09 11:47 UTC |
| 45.188.167.178 | ip |
39
|
1 | MX | 2026-11-09 11:47 UTC | 2026-11-09 11:47 UTC |
| 168.144.41.236 | ip |
97
|
12 | SG | 2026-11-09 11:38 UTC | 2026-11-09 11:35 UTC |
| 103.108.130.169 | ip |
39
|
1 | ID | 2026-11-09 11:34 UTC | 2026-11-09 11:34 UTC |
| 143.105.135.251 | ip |
39
|
1 | AR | 2026-11-09 11:34 UTC | 2026-11-09 11:34 UTC |
| 94.158.58.24 | ip |
70
|
2 | UZ | 2026-11-09 11:34 UTC | 2026-11-09 11:34 UTC |
| 139.59.255.125 | ip |
97
|
12 | SG | 2026-11-09 11:34 UTC | 2026-11-09 11:30 UTC |
Showing 1-25 of 90226 indicators