IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 32.199.168.201 ip
Score
6
/100
raw: 0.58
Reports
82
Last Reported
2026-06-17 19:31 UTC
Categories
Config Exposure Probe (46)
Scanning (30)
API Probe (4)
Credential Stuffing (2)
Network details
ASN
14618
Organization
Amazon.com, Inc.
Country
US
Threat Intelligence enriched 2026-11-04 20:03 UTC
Reverse DNS
ec2-32-199-168-201.compute-1.amazonaws.com
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-17 19:01 UTC | catch-all-scan | direct | POST | /___proxy_subdomain_whm/login/ | burst creds |
| 2026-06-17 19:01 UTC | iac-secrets | direct | GET | /terraform.tfstate | burst |
| 2026-06-17 19:01 UTC | catch-all-suspicious | direct | GET | /.kube/config | burst |
| 2026-06-17 19:01 UTC | catch-all-suspicious | direct | GET | /application.yml | burst |
| 2026-06-17 19:01 UTC | catch-all-scan | direct | GET | /application.properties | burst |
| 2026-06-17 19:01 UTC | catch-all-suspicious | direct | GET | /web.config | burst |
| 2026-06-17 19:01 UTC | catch-all-traversal | direct | GET | /proc/self/environ | burst |
| 2026-06-17 19:00 UTC | catch-all-scan | direct | GET | /.netrc | burst |
| 2026-06-17 19:00 UTC | catch-all-scan | direct | GET | /.ssh/id_ed25519 | burst |
| 2026-06-17 19:00 UTC | catch-all-scan | direct | GET | /.ssh/id_rsa | burst |
| 2026-06-17 19:00 UTC | catch-all-backup | direct | GET | /data/dump.sql | burst |
| 2026-06-17 19:00 UTC | catch-all-backup | direct | GET | /database.sql | burst |
| 2026-06-17 19:00 UTC | sql-dump | direct | GET | /dump.sql | burst |
| 2026-06-17 19:00 UTC | catch-all-suspicious | direct | GET | /app/config/parameters.yml | burst |
| 2026-06-17 19:00 UTC | catch-all-script | direct | GET | /config/database.php | burst |
| 2026-06-17 19:00 UTC | catch-all-script | direct | GET | /includes/config.php | burst |
| 2026-06-17 19:00 UTC | catch-all-script | direct | GET | /config/config.php | burst |
| 2026-06-17 19:00 UTC | config-php | direct | GET | /config.php | burst |
| 2026-06-17 19:00 UTC | actuator | direct | GET | /actuator/logfile | burst |
| 2026-06-17 19:00 UTC | actuator | direct | GET | /actuator/env | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 103.50.150.125 | ip |
63
|
2 | IN | 2026-11-10 04:42 UTC | 2026-11-10 04:42 UTC |
| 77.239.162.67 | ip |
39
|
1 | UA | 2026-11-10 04:42 UTC | 2026-11-10 04:42 UTC |
| 210.195.112.53 | ip |
82
|
3 | MY | 2026-11-10 04:42 UTC | 2026-11-10 04:42 UTC |
| 152.172.81.12 | ip |
45
|
3 | CL | 2026-11-10 04:42 UTC | 2026-11-10 04:42 UTC |
| 205.164.150.53 | ip |
63
|
2 | PK | 2026-11-10 04:42 UTC | 2026-11-10 04:42 UTC |
| 146.115.35.78 | ip |
63
|
2 | US | 2026-11-10 04:42 UTC | 2026-11-10 04:42 UTC |
| 200.217.140.221 | ip |
100
|
12 | BR | 2026-11-10 04:35 UTC | 2026-11-10 04:33 UTC |
| 168.90.207.66 | ip |
100
|
14 | BR | 2026-11-10 04:35 UTC | 2026-11-10 04:33 UTC |
| 122.168.84.182 | ip |
100
|
13 | IN | 2026-11-10 04:35 UTC | 2026-11-10 04:33 UTC |
| 88.185.96.129 | ip |
100
|
15 | FR | 2026-11-10 04:35 UTC | 2026-11-10 04:32 UTC |
| 71.233.184.107 | ip |
100
|
14 | US | 2026-11-10 04:35 UTC | 2026-11-10 04:32 UTC |
| 85.153.232.217 | ip |
100
|
30 | TR | 2026-11-10 04:30 UTC | 2026-11-10 04:26 UTC |
| 49.37.252.132 | ip |
100
|
28 | IN | 2026-11-10 04:30 UTC | 2026-11-10 04:26 UTC |
| 105.159.187.183 | ip |
100
|
31 | MA | 2026-11-10 04:30 UTC | 2026-11-10 04:26 UTC |
| 45.65.224.150 | ip |
63
|
2 | AR | 2026-11-10 04:22 UTC | 2026-11-10 04:22 UTC |
| 49.14.157.26 | ip |
59
|
2 | IN | 2026-11-10 04:22 UTC | 2026-11-10 04:22 UTC |
| 92.222.108.96 | ip |
18
|
1 | FR | 2026-11-10 04:17 UTC | 2026-11-10 04:17 UTC |
| 69.160.102.87 | ip |
59
|
2 | JM | 2026-11-10 04:14 UTC | 2026-11-10 04:13 UTC |
| 106.77.133.12 | ip |
59
|
2 | IN | 2026-11-10 04:14 UTC | 2026-11-10 04:13 UTC |
| 168.227.131.212 | ip |
39
|
1 | GT | 2026-11-10 04:13 UTC | 2026-11-10 04:13 UTC |
| 45.229.85.230 | ip |
39
|
1 | AR | 2026-11-10 04:13 UTC | 2026-11-10 04:13 UTC |
| 148.227.67.106 | ip |
39
|
1 | CL | 2026-11-10 04:13 UTC | 2026-11-10 04:13 UTC |
| 213.230.92.69 | ip |
50
|
1 | UZ | 2026-11-10 03:56 UTC | 2026-11-10 03:56 UTC |
| 9.246.45.219 | ip |
50
|
1 | DE | 2026-11-10 03:55 UTC | 2026-11-10 03:55 UTC |
| 34.236.223.187 | ip |
50
|
1 | US | 2026-11-10 03:52 UTC | 2026-11-10 03:52 UTC |
Showing 1-25 of 91417 indicators