IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 32.199.168.201 ip

Score
6
/100
raw: 0.58
Reports
82
Last Reported
2026-06-17 19:31 UTC
Categories
Config Exposure Probe (46) Scanning (30) API Probe (4) Credential Stuffing (2)

Network details

ASN
14618
Organization
Amazon.com, Inc.
Country
US

Threat Intelligence enriched 2026-11-04 20:03 UTC

Reverse DNS
ec2-32-199-168-201.compute-1.amazonaws.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-17 19:01 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-17 19:01 UTC iac-secrets direct GET /terraform.tfstate burst
2026-06-17 19:01 UTC catch-all-suspicious direct GET /.kube/config burst
2026-06-17 19:01 UTC catch-all-suspicious direct GET /application.yml burst
2026-06-17 19:01 UTC catch-all-scan direct GET /application.properties burst
2026-06-17 19:01 UTC catch-all-suspicious direct GET /web.config burst
2026-06-17 19:01 UTC catch-all-traversal direct GET /proc/self/environ burst
2026-06-17 19:00 UTC catch-all-scan direct GET /.netrc burst
2026-06-17 19:00 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-06-17 19:00 UTC catch-all-scan direct GET /.ssh/id_rsa burst
2026-06-17 19:00 UTC catch-all-backup direct GET /data/dump.sql burst
2026-06-17 19:00 UTC catch-all-backup direct GET /database.sql burst
2026-06-17 19:00 UTC sql-dump direct GET /dump.sql burst
2026-06-17 19:00 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-17 19:00 UTC catch-all-script direct GET /config/database.php burst
2026-06-17 19:00 UTC catch-all-script direct GET /includes/config.php burst
2026-06-17 19:00 UTC catch-all-script direct GET /config/config.php burst
2026-06-17 19:00 UTC config-php direct GET /config.php burst
2026-06-17 19:00 UTC actuator direct GET /actuator/logfile burst
2026-06-17 19:00 UTC actuator direct GET /actuator/env burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
103.50.150.125 ip
63
2 IN 2026-11-10 04:42 UTC 2026-11-10 04:42 UTC
77.239.162.67 ip
39
1 UA 2026-11-10 04:42 UTC 2026-11-10 04:42 UTC
210.195.112.53 ip
82
3 MY 2026-11-10 04:42 UTC 2026-11-10 04:42 UTC
152.172.81.12 ip
45
3 CL 2026-11-10 04:42 UTC 2026-11-10 04:42 UTC
205.164.150.53 ip
63
2 PK 2026-11-10 04:42 UTC 2026-11-10 04:42 UTC
146.115.35.78 ip
63
2 US 2026-11-10 04:42 UTC 2026-11-10 04:42 UTC
200.217.140.221 ip
100
12 BR 2026-11-10 04:35 UTC 2026-11-10 04:33 UTC
168.90.207.66 ip
100
14 BR 2026-11-10 04:35 UTC 2026-11-10 04:33 UTC
122.168.84.182 ip
100
13 IN 2026-11-10 04:35 UTC 2026-11-10 04:33 UTC
88.185.96.129 ip
100
15 FR 2026-11-10 04:35 UTC 2026-11-10 04:32 UTC
71.233.184.107 ip
100
14 US 2026-11-10 04:35 UTC 2026-11-10 04:32 UTC
85.153.232.217 ip
100
30 TR 2026-11-10 04:30 UTC 2026-11-10 04:26 UTC
49.37.252.132 ip
100
28 IN 2026-11-10 04:30 UTC 2026-11-10 04:26 UTC
105.159.187.183 ip
100
31 MA 2026-11-10 04:30 UTC 2026-11-10 04:26 UTC
45.65.224.150 ip
63
2 AR 2026-11-10 04:22 UTC 2026-11-10 04:22 UTC
49.14.157.26 ip
59
2 IN 2026-11-10 04:22 UTC 2026-11-10 04:22 UTC
92.222.108.96 ip
18
1 FR 2026-11-10 04:17 UTC 2026-11-10 04:17 UTC
69.160.102.87 ip
59
2 JM 2026-11-10 04:14 UTC 2026-11-10 04:13 UTC
106.77.133.12 ip
59
2 IN 2026-11-10 04:14 UTC 2026-11-10 04:13 UTC
168.227.131.212 ip
39
1 GT 2026-11-10 04:13 UTC 2026-11-10 04:13 UTC
45.229.85.230 ip
39
1 AR 2026-11-10 04:13 UTC 2026-11-10 04:13 UTC
148.227.67.106 ip
39
1 CL 2026-11-10 04:13 UTC 2026-11-10 04:13 UTC
213.230.92.69 ip
50
1 UZ 2026-11-10 03:56 UTC 2026-11-10 03:56 UTC
9.246.45.219 ip
50
1 DE 2026-11-10 03:55 UTC 2026-11-10 03:55 UTC
34.236.223.187 ip
50
1 US 2026-11-10 03:52 UTC 2026-11-10 03:52 UTC

Showing 1-25 of 91417 indicators