IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 3.9.189.117 ip

Score
18
/100
raw: 2.0
Reports
690
Last Reported
2026-05-27 00:29 UTC
Categories
Config Exposure Probe (591) Scanning (60) API Probe (24) Admin Panel Probe (15)

Network details

ASN
16509
Organization
Amazon.com, Inc.
Country
GB

Threat Intelligence enriched 2026-11-04 06:18 UTC

Reverse DNS
ec2-3-9-189-117.eu-west-2.compute.amazonaws.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-27 00:29 UTC catch-all-suspicious direct GET /cloud-key.json
2026-05-27 00:29 UTC catch-all-suspicious direct GET /google-service-account.json
2026-05-27 00:29 UTC catch-all-suspicious direct GET /gcp_key.json
2026-05-27 00:29 UTC catch-all-suspicious direct GET /service_account.json
2026-05-27 00:29 UTC catch-all-suspicious direct GET /gcloud-service-key.json
2026-05-27 00:28 UTC catch-all-suspicious direct GET /firebase-config.json
2026-05-27 00:28 UTC catch-all-suspicious direct GET /firebase-key.json
2026-05-27 00:28 UTC catch-all-admin direct GET /firebase-adminsdk.json
2026-05-27 00:28 UTC catch-all-suspicious direct GET /keyfile.json
2026-05-27 00:28 UTC catch-all-suspicious direct GET /key.json
2026-05-27 00:28 UTC catch-all-suspicious direct GET /application_default_credentials.json
2026-05-27 00:28 UTC catch-all-suspicious direct GET /.config/gcloud/application_default_credentials.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /google-key.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /google-credentials.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /credentials.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /gcp-sa.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /gcp-credentials.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /gcp-key.json
2026-05-27 00:27 UTC catch-all-suspicious direct GET /sa.json
2026-05-27 00:26 UTC catch-all-suspicious direct GET /service-account.json

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
172.68.195.166 ip
70
2 DE 2026-11-06 18:57 UTC 2026-11-06 18:57 UTC
51.81.169.203 ip
18
1 US 2026-11-06 18:57 UTC 2026-11-06 18:57 UTC
190.163.238.177 ip
100
21 CL 2026-11-06 18:57 UTC 2026-11-06 18:55 UTC
170.150.157.26 ip
100
20 CL 2026-11-06 18:57 UTC 2026-11-06 18:55 UTC
149.248.79.52 ip
75
4 US 2026-11-06 18:50 UTC 2026-11-06 18:50 UTC
99.228.243.187 ip
86
4 CA 2026-11-06 18:41 UTC 2026-11-06 18:41 UTC
190.114.43.233 ip
39
1 CL 2026-11-06 18:41 UTC 2026-11-06 18:41 UTC
5.248.126.201 ip
70
2 UA 2026-11-06 18:41 UTC 2026-11-06 18:41 UTC
41.90.136.140 ip
39
1 KE 2026-11-06 18:41 UTC 2026-11-06 18:41 UTC
37.139.39.83 ip
39
1 RU 2026-11-06 18:41 UTC 2026-11-06 18:41 UTC
188.190.95.174 ip
39
1 UA 2026-11-06 18:41 UTC 2026-11-06 18:41 UTC
187.243.192.19 ip
99
9 MX 2026-11-06 18:40 UTC 2026-11-06 18:40 UTC
185.2.184.61 ip
99
6 RU 2026-11-06 18:40 UTC 2026-11-06 18:39 UTC
103.226.195.99 ip
100
10 ES 2026-11-06 18:40 UTC 2026-11-06 18:39 UTC
141.98.11.8 ip
99
7 LT 2026-11-06 18:39 UTC 2026-11-06 18:38 UTC
94.73.24.138 ip
100
18 PS 2026-11-06 18:39 UTC 2026-11-06 18:37 UTC
194.32.153.69 ip
50
1 BE 2026-11-06 18:32 UTC 2026-11-06 18:32 UTC
102.214.117.54 ip
100
27 ZA 2026-11-06 18:28 UTC 2026-11-06 18:24 UTC
89.92.120.46 ip
100
30 FR 2026-11-06 18:28 UTC 2026-11-06 18:24 UTC
213.200.31.3 ip
100
29 GE 2026-11-06 18:28 UTC 2026-11-06 18:24 UTC
138.68.147.39 ip
93
4 GB 2026-11-06 18:24 UTC 2026-11-06 18:24 UTC
212.30.33.247 ip
100
11 ES 2026-11-06 18:22 UTC 2026-11-06 18:21 UTC
81.180.253.175 ip
45
1 RO 2026-11-06 18:18 UTC 2026-11-06 18:18 UTC
103.129.125.171 ip
100
31 PH 2026-11-06 18:22 UTC 2026-11-06 18:18 UTC
102.217.240.151 ip
100
30 ZA 2026-11-06 18:22 UTC 2026-11-06 18:18 UTC

Showing 1-25 of 87544 indicators