IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 13.209.41.191 ip
Score
28
/100
raw: 3.26
Reports
489
Last Reported
2026-06-16 00:43 UTC
Categories
Config Exposure Probe (378)
Scanning (72)
Admin Panel Probe (24)
API Probe (15)
Network details
ASN
16509
Organization
Amazon.com, Inc.
Country
KR
Threat Intelligence enriched 2026-11-04 19:12 UTC
Reverse DNS
ec2-13-209-41-191.ap-northeast-2.compute.amazonaws.com
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-16 00:42 UTC | catch-all-script | direct | GET | /smtp/phpinfo.php | |
| 2026-06-16 00:42 UTC | catch-all-script | direct | GET | /smtp/phpinfo.php | |
| 2026-06-16 00:42 UTC | catch-all-admin | direct | GET | /webmail/phpinfo.php | |
| 2026-06-16 00:41 UTC | catch-all-admin | direct | GET | /webmail/phpinfo.php | |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /hosting/phpinfo.php | burst |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /hosting/phpinfo.php | burst |
| 2026-06-16 00:41 UTC | catch-all-admin | direct | GET | /cpanel/phpinfo.php | burst |
| 2026-06-16 00:41 UTC | catch-all-admin | direct | GET | /cpanel/phpinfo.php | burst |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /mail/phpinfo.php | burst |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /mail/phpinfo.php | burst |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /webroot/index.php/_environment | burst |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /webroot/index.php/_environment | burst |
| 2026-06-16 00:41 UTC | debug-panel | direct | GET | /_profiler/phpinfo | |
| 2026-06-16 00:41 UTC | debug-panel | direct | GET | /_profiler/phpinfo | |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /server-status.php | |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /server-status.php | |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /server-info.php | |
| 2026-06-16 00:41 UTC | catch-all-script | direct | GET | /server-info.php | |
| 2026-06-16 00:40 UTC | catch-all-script | direct | GET | /old_phpinfo.php | burst |
| 2026-06-16 00:40 UTC | catch-all-script | direct | GET | /old_phpinfo.php | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 185.99.5.239 | ip |
50
|
1 | RU | 2026-11-10 00:49 UTC | 2026-11-10 00:49 UTC |
| 190.177.235.19 | ip |
50
|
1 | AR | 2026-11-10 00:48 UTC | 2026-11-10 00:48 UTC |
| 82.96.101.98 | ip |
50
|
1 | DE | 2026-11-10 00:48 UTC | 2026-11-10 00:48 UTC |
| 63.143.93.131 | ip |
50
|
1 | JM | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 45.182.61.52 | ip |
50
|
1 | BR | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 181.160.56.22 | ip |
50
|
1 | CL | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 94.31.94.146 | ip |
50
|
1 | DE | 2026-11-10 00:47 UTC | 2026-11-10 00:47 UTC |
| 142.154.123.147 | ip |
50
|
1 | SA | 2026-11-10 00:45 UTC | 2026-11-10 00:45 UTC |
| 51.81.165.211 | ip |
18
|
1 | US | 2026-11-10 00:45 UTC | 2026-11-10 00:45 UTC |
| 102.200.188.131 | ip |
50
|
1 | ZA | 2026-11-10 00:44 UTC | 2026-11-10 00:44 UTC |
| 190.122.185.187 | ip |
50
|
1 | GT | 2026-11-10 00:43 UTC | 2026-11-10 00:43 UTC |
| 45.239.238.17 | ip |
50
|
1 | BR | 2026-11-10 00:43 UTC | 2026-11-10 00:43 UTC |
| 177.245.233.71 | ip |
50
|
1 | MX | 2026-11-10 00:43 UTC | 2026-11-10 00:43 UTC |
| 216.25.90.89 | ip |
18
|
1 | US | 2026-11-10 00:42 UTC | 2026-11-10 00:42 UTC |
| 37.61.119.42 | ip |
50
|
1 | AZ | 2026-11-10 00:41 UTC | 2026-11-10 00:41 UTC |
| 85.244.228.47 | ip |
50
|
1 | PT | 2026-11-10 00:40 UTC | 2026-11-10 00:40 UTC |
| 128.78.98.82 | ip |
50
|
1 | FR | 2026-11-10 00:39 UTC | 2026-11-10 00:39 UTC |
| 14.239.165.115 | ip |
50
|
1 | VN | 2026-11-10 00:38 UTC | 2026-11-10 00:38 UTC |
| 196.206.8.147 | ip |
50
|
1 | MA | 2026-11-10 00:38 UTC | 2026-11-10 00:38 UTC |
| 190.134.235.254 | ip |
50
|
1 | UY | 2026-11-10 00:37 UTC | 2026-11-10 00:37 UTC |
| 170.254.160.157 | ip |
50
|
1 | BR | 2026-11-10 00:36 UTC | 2026-11-10 00:36 UTC |
| 179.24.122.250 | ip |
50
|
1 | UY | 2026-11-10 00:36 UTC | 2026-11-10 00:36 UTC |
| 176.215.224.233 | ip |
50
|
1 | RU | 2026-11-10 00:36 UTC | 2026-11-10 00:36 UTC |
| 190.162.36.96 | ip |
50
|
1 | CL | 2026-11-10 00:35 UTC | 2026-11-10 00:35 UTC |
| 187.190.136.250 | ip |
50
|
1 | MX | 2026-11-10 00:34 UTC | 2026-11-10 00:34 UTC |
Showing 1-25 of 91160 indicators