IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 95.111.253.40 ip
Score
100
/100
raw: 99.87
Reports
13
Last Reported
2026-11-12 18:12 UTC
Categories
Web Stack Probe (11)
Scanning (2)
Network details
ASN
51167
Organization
Contabo GmbH
Country
FR
Threat Intelligence enriched 2026-11-12 18:11 UTC
Reverse DNS
vmi3749573.contaboserver.net
DNSBL Status
Clean
Sensor Activity last 13 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-12 18:11 UTC | wp-json | direct | POST | / | burst |
| 2026-11-12 18:11 UTC | wp-json | direct | POST | /wp-json/batch/v1 | burst |
| 2026-11-12 18:11 UTC | wp-json | direct | GET | / | burst |
| 2026-11-12 18:11 UTC | wp-login | direct | GET | /wp-login.php | burst |
| 2026-11-12 18:11 UTC | wp-json | direct | GET | /wp-json/ | burst |
| 2026-11-12 18:11 UTC | catch-all-scan | direct | GET | /readme.html | burst |
| 2026-11-12 18:11 UTC | wp-admin | direct | GET | /wp-admin/css/common.min.css | burst |
| 2026-11-12 18:11 UTC | catch-all-cms | direct | GET | /wp-links-opml.php | burst |
| 2026-11-12 18:11 UTC | catch-all-scan | direct | GET | /readme.html | burst |
| 2026-11-12 18:11 UTC | wp-json | direct | GET | / | |
| 2026-11-12 18:11 UTC | wp-admin | direct | GET | /wp-admin/css/common.min.css | |
| 2026-11-12 18:11 UTC | catch-all-cms | direct | GET | /wp-links-opml.php | |
| 2026-11-12 18:11 UTC | wp-json | direct | GET | /wp-json/ |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 85.114.195.155 | ip |
99
|
6 | UA | 2026-11-12 18:48 UTC | 2026-11-12 18:48 UTC |
| 49.37.159.42 | ip |
98
|
6 | IN | 2026-11-12 18:48 UTC | 2026-11-12 18:47 UTC |
| 46.200.53.98 | ip |
100
|
12 | UA | 2026-11-12 18:48 UTC | 2026-11-12 18:47 UTC |
| 1.158.82.164 | ip |
99
|
7 | AU | 2026-11-12 18:48 UTC | 2026-11-12 18:47 UTC |
| 136.71.99.220 | ip |
85
|
5 | US | 2026-11-12 18:41 UTC | 2026-11-12 18:41 UTC |
| 52.156.110.236 | ip |
18
|
1 | US | 2026-11-12 18:36 UTC | 2026-11-12 18:36 UTC |
| 13.140.236.140 | ip |
70
|
4 | US | 2026-11-12 18:40 UTC | 2026-11-12 18:26 UTC |
| 177.11.105.212 | ip |
39
|
1 | BR | 2026-11-12 18:13 UTC | 2026-11-12 18:13 UTC |
| 95.111.253.40 | ip |
100
|
13 | FR | 2026-11-12 18:12 UTC | 2026-11-12 18:11 UTC |
| 86.38.187.71 | ip |
39
|
1 | LT | 2026-11-12 18:09 UTC | 2026-11-12 18:09 UTC |
| 34.124.192.125 | ip |
39
|
1 | SG | 2026-11-12 18:07 UTC | 2026-11-12 18:07 UTC |
| 45.61.184.64 | ip |
100
|
16 | US | 2026-11-12 18:26 UTC | 2026-11-12 17:58 UTC |
| 197.186.9.136 | ip |
100
|
23 | TZ | 2026-11-12 18:02 UTC | 2026-11-12 17:58 UTC |
| 186.121.161.71 | ip |
100
|
29 | EC | 2026-11-12 18:02 UTC | 2026-11-12 17:58 UTC |
| 116.206.254.108 | ip |
100
|
28 | BD | 2026-11-12 18:02 UTC | 2026-11-12 17:58 UTC |
| 87.232.95.21 | ip |
55
|
1 | NL | 2026-11-12 17:55 UTC | 2026-11-12 17:55 UTC |
| 79.106.227.244 | ip |
100
|
10 | AL | 2026-11-12 17:55 UTC | 2026-11-12 17:54 UTC |
| 190.108.83.138 | ip |
100
|
30 | PE | 2026-11-12 17:55 UTC | 2026-11-12 17:51 UTC |
| 185.150.164.37 | ip |
100
|
31 | AM | 2026-11-12 17:55 UTC | 2026-11-12 17:51 UTC |
| 189.102.84.205 | ip |
100
|
19 | BR | 2026-11-12 17:54 UTC | 2026-11-12 17:51 UTC |
| 34.84.227.248 | ip |
100
|
161 | JP | 2026-11-12 17:49 UTC | 2026-11-12 17:47 UTC |
| 162.158.87.175 | ip |
70
|
2 | DE | 2026-11-12 17:45 UTC | 2026-11-12 17:45 UTC |
| 86.38.187.241 | ip |
39
|
1 | LT | 2026-11-12 17:44 UTC | 2026-11-12 17:44 UTC |
| 213.230.87.80 | ip |
100
|
30 | UZ | 2026-11-12 17:28 UTC | 2026-11-12 17:23 UTC |
| 88.174.92.246 | ip |
100
|
10 | FR | 2026-11-12 17:21 UTC | 2026-11-12 17:20 UTC |
Showing 1-25 of 97203 indicators