IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 91.90.83.247 ip

Score
100
/100
raw: 1583.99
Reports
170
Last Reported
2026-11-15 12:47 UTC
Categories
Scanning (108) Config Exposure Probe (53) Admin Panel Probe (3) Web Stack Probe (3) API Probe (3)

Network details

ASN
51167
Organization
Contabo GmbH
Country
FR

Threat Intelligence enriched 2026-11-15 12:47 UTC

Reverse DNS
vmi3736996.contaboserver.net
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-15 12:46 UTC catch-all-config direct GET /server/.env burst
2026-11-15 12:46 UTC api direct GET /api/.env burst
2026-11-15 12:46 UTC catch-all-config direct GET /apis/.env burst
2026-11-15 12:46 UTC catch-all-config direct GET /app/.env burst
2026-11-15 12:46 UTC catch-all-suspicious direct GET /config.json burst
2026-11-15 12:46 UTC catch-all-config direct GET /main/.env burst
2026-11-15 12:46 UTC catch-all-config direct GET /staging/.env burst
2026-11-15 12:46 UTC catch-all-scan direct GET /Samples/env burst
2026-11-15 12:46 UTC catch-all-config direct GET /.env.txt burst
2026-11-15 12:46 UTC catch-all-config direct GET /azure/.env burst
2026-11-15 12:46 UTC catch-all-config direct GET /backend/.env.backup burst
2026-11-15 12:46 UTC catch-all-suspicious direct GET /appsettings.Development.json burst
2026-11-15 12:46 UTC catch-all-suspicious direct GET /appsettings.Production.json burst
2026-11-15 12:46 UTC catch-all-suspicious direct GET /web.config burst
2026-11-15 12:46 UTC catch-all-config direct GET /.env.save burst
2026-11-15 12:46 UTC catch-all-config direct GET /.env.staging burst
2026-11-15 12:46 UTC catch-all-scan direct GET /server/app.py burst
2026-11-15 12:46 UTC catch-all-config direct GET /.env-exemple burst
2026-11-15 12:46 UTC catch-all-suspicious direct GET /serverless.yml burst
2026-11-15 12:46 UTC catch-all-suspicious direct GET /aws.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
35.214.231.158 ip
55
 2 NL 2026-11-15 13:05 UTC 2026-11-15 13:05 UTC
86.38.187.179 ip
39
 1 LT 2026-11-15 13:05 UTC 2026-11-15 13:05 UTC
36.77.189.55 ip
39
 1 ID 2026-11-15 13:05 UTC 2026-11-15 13:05 UTC
31.58.245.178 ip
94
 4 TR 2026-11-15 13:05 UTC 2026-11-15 13:05 UTC
190.142.155.134 ip
50
 1 VE 2026-11-15 13:05 UTC 2026-11-15 13:05 UTC
104.28.231.134 ip
70
 2 MX 2026-11-15 13:05 UTC 2026-11-15 13:05 UTC
38.166.114.159 ip
50
 1 VE 2026-11-15 13:04 UTC 2026-11-15 13:04 UTC
104.28.199.134 ip
100
 9 MX 2026-11-15 13:05 UTC 2026-11-15 13:04 UTC
104.28.231.132 ip
100
 9 MX 2026-11-15 13:05 UTC 2026-11-15 13:04 UTC
104.28.199.135 ip
95
 4 MX 2026-11-15 13:05 UTC 2026-11-15 13:04 UTC
104.28.199.133 ip
99
 6 MX 2026-11-15 13:05 UTC 2026-11-15 13:04 UTC
103.107.78.212 ip
39
 1 BD 2026-11-15 13:03 UTC 2026-11-15 13:03 UTC
103.166.153.47 ip
50
 1 BD 2026-11-15 13:03 UTC 2026-11-15 13:03 UTC
103.181.111.213 ip
39
 1 IN 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
154.110.163.225 ip
50
 1 TN 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
49.42.93.15 ip
39
 1 IN 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
41.248.12.67 ip
50
 1 MA 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
187.0.233.34 ip
39
 1 BR 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
147.90.103.185 ip
39
 1 PK 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
103.69.102.158 ip
39
 1 IN 2026-11-15 13:01 UTC 2026-11-15 13:01 UTC
193.104.179.200 ip
50
 1 UZ 2026-11-15 13:00 UTC 2026-11-15 13:00 UTC
187.233.235.4 ip
39
 1 MX 2026-11-15 13:00 UTC 2026-11-15 13:00 UTC
148.227.115.199 ip
50
 1 CL 2026-11-15 12:59 UTC 2026-11-15 12:59 UTC
103.106.119.37 ip
50
 1 BD 2026-11-15 12:59 UTC 2026-11-15 12:59 UTC
178.69.222.113 ip
39
 1 RU 2026-11-15 12:59 UTC 2026-11-15 12:59 UTC

Showing 1-25 of 104969 indicators