IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 13.209.41.191 ip

Score
28
/100
raw: 3.26
Reports
489
Last Reported
2026-06-16 00:43 UTC
Categories
Config Exposure Probe (378) Scanning (72) Admin Panel Probe (24) API Probe (15)

Network details

ASN
16509
Organization
Amazon.com, Inc.
Country
KR

Threat Intelligence enriched 2026-11-04 19:12 UTC

Reverse DNS
ec2-13-209-41-191.ap-northeast-2.compute.amazonaws.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-16 00:42 UTC catch-all-script direct GET /smtp/phpinfo.php
2026-06-16 00:42 UTC catch-all-script direct GET /smtp/phpinfo.php
2026-06-16 00:42 UTC catch-all-admin direct GET /webmail/phpinfo.php
2026-06-16 00:41 UTC catch-all-admin direct GET /webmail/phpinfo.php
2026-06-16 00:41 UTC catch-all-script direct GET /hosting/phpinfo.php burst
2026-06-16 00:41 UTC catch-all-script direct GET /hosting/phpinfo.php burst
2026-06-16 00:41 UTC catch-all-admin direct GET /cpanel/phpinfo.php burst
2026-06-16 00:41 UTC catch-all-admin direct GET /cpanel/phpinfo.php burst
2026-06-16 00:41 UTC catch-all-script direct GET /mail/phpinfo.php burst
2026-06-16 00:41 UTC catch-all-script direct GET /mail/phpinfo.php burst
2026-06-16 00:41 UTC catch-all-script direct GET /webroot/index.php/_environment burst
2026-06-16 00:41 UTC catch-all-script direct GET /webroot/index.php/_environment burst
2026-06-16 00:41 UTC debug-panel direct GET /_profiler/phpinfo
2026-06-16 00:41 UTC debug-panel direct GET /_profiler/phpinfo
2026-06-16 00:41 UTC catch-all-script direct GET /server-status.php
2026-06-16 00:41 UTC catch-all-script direct GET /server-status.php
2026-06-16 00:41 UTC catch-all-script direct GET /server-info.php
2026-06-16 00:41 UTC catch-all-script direct GET /server-info.php
2026-06-16 00:40 UTC catch-all-script direct GET /old_phpinfo.php burst
2026-06-16 00:40 UTC catch-all-script direct GET /old_phpinfo.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
185.99.5.239 ip
50
1 RU 2026-11-10 00:49 UTC 2026-11-10 00:49 UTC
190.177.235.19 ip
50
1 AR 2026-11-10 00:48 UTC 2026-11-10 00:48 UTC
82.96.101.98 ip
50
1 DE 2026-11-10 00:48 UTC 2026-11-10 00:48 UTC
63.143.93.131 ip
50
1 JM 2026-11-10 00:47 UTC 2026-11-10 00:47 UTC
45.182.61.52 ip
50
1 BR 2026-11-10 00:47 UTC 2026-11-10 00:47 UTC
181.160.56.22 ip
50
1 CL 2026-11-10 00:47 UTC 2026-11-10 00:47 UTC
94.31.94.146 ip
50
1 DE 2026-11-10 00:47 UTC 2026-11-10 00:47 UTC
142.154.123.147 ip
50
1 SA 2026-11-10 00:45 UTC 2026-11-10 00:45 UTC
51.81.165.211 ip
18
1 US 2026-11-10 00:45 UTC 2026-11-10 00:45 UTC
102.200.188.131 ip
50
1 ZA 2026-11-10 00:44 UTC 2026-11-10 00:44 UTC
190.122.185.187 ip
50
1 GT 2026-11-10 00:43 UTC 2026-11-10 00:43 UTC
45.239.238.17 ip
50
1 BR 2026-11-10 00:43 UTC 2026-11-10 00:43 UTC
177.245.233.71 ip
50
1 MX 2026-11-10 00:43 UTC 2026-11-10 00:43 UTC
216.25.90.89 ip
18
1 US 2026-11-10 00:42 UTC 2026-11-10 00:42 UTC
37.61.119.42 ip
50
1 AZ 2026-11-10 00:41 UTC 2026-11-10 00:41 UTC
85.244.228.47 ip
50
1 PT 2026-11-10 00:40 UTC 2026-11-10 00:40 UTC
128.78.98.82 ip
50
1 FR 2026-11-10 00:39 UTC 2026-11-10 00:39 UTC
14.239.165.115 ip
50
1 VN 2026-11-10 00:38 UTC 2026-11-10 00:38 UTC
196.206.8.147 ip
50
1 MA 2026-11-10 00:38 UTC 2026-11-10 00:38 UTC
190.134.235.254 ip
50
1 UY 2026-11-10 00:37 UTC 2026-11-10 00:37 UTC
170.254.160.157 ip
50
1 BR 2026-11-10 00:36 UTC 2026-11-10 00:36 UTC
179.24.122.250 ip
50
1 UY 2026-11-10 00:36 UTC 2026-11-10 00:36 UTC
176.215.224.233 ip
50
1 RU 2026-11-10 00:36 UTC 2026-11-10 00:36 UTC
190.162.36.96 ip
50
1 CL 2026-11-10 00:35 UTC 2026-11-10 00:35 UTC
187.190.136.250 ip
50
1 MX 2026-11-10 00:34 UTC 2026-11-10 00:34 UTC

Showing 1-25 of 91160 indicators