IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 56.228.14.148 ip
Score
13
/100
raw: 1.38
Reports
459
Last Reported
2026-05-28 01:16 UTC
Categories
Config Exposure Probe (394)
Scanning (39)
API Probe (16)
Admin Panel Probe (10)
Network details
ASN
16509
Organization
Amazon.com, Inc.
Country
SE
Threat Intelligence enriched 2026-11-04 07:15 UTC
Reverse DNS
ec2-56-228-14-148.eu-north-1.compute.amazonaws.com
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-05-28 01:15 UTC | catch-all-suspicious | direct | GET | /cloud-key.json | |
| 2026-05-28 01:15 UTC | catch-all-suspicious | direct | GET | /google-service-account.json | |
| 2026-05-28 01:15 UTC | catch-all-suspicious | direct | GET | /gcp_key.json | |
| 2026-05-28 01:15 UTC | catch-all-suspicious | direct | GET | /service_account.json | |
| 2026-05-28 01:14 UTC | catch-all-suspicious | direct | GET | /gcloud-service-key.json | |
| 2026-05-28 01:14 UTC | catch-all-suspicious | direct | GET | /firebase-config.json | |
| 2026-05-28 01:14 UTC | catch-all-suspicious | direct | GET | /firebase-key.json | |
| 2026-05-28 01:14 UTC | catch-all-admin | direct | GET | /firebase-adminsdk.json | |
| 2026-05-28 01:14 UTC | catch-all-suspicious | direct | GET | /keyfile.json | |
| 2026-05-28 01:14 UTC | catch-all-suspicious | direct | GET | /key.json | |
| 2026-05-28 01:14 UTC | catch-all-suspicious | direct | GET | /application_default_credentials.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /.config/gcloud/application_default_credentials.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /google-key.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /google-credentials.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /credentials.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /gcp-sa.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /gcp-credentials.json | |
| 2026-05-28 01:13 UTC | catch-all-suspicious | direct | GET | /gcp-key.json | |
| 2026-05-28 01:12 UTC | catch-all-suspicious | direct | GET | /sa.json | |
| 2026-05-28 01:12 UTC | catch-all-suspicious | direct | GET | /service-account.json |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 32.194.171.18 | ip |
55
|
4 | US | 2026-11-07 01:28 UTC | 2026-11-07 01:27 UTC |
| 174.138.7.0 | ip |
99
|
7 | NL | 2026-11-07 01:22 UTC | 2026-11-07 01:21 UTC |
| 69.58.6.172 | ip |
26
|
1 | US | 2026-11-07 01:17 UTC | 2026-11-07 01:17 UTC |
| 172.86.119.239 | ip |
70
|
2 | US | 2026-11-07 01:16 UTC | 2026-11-07 01:16 UTC |
| 216.25.90.56 | ip |
45
|
2 | US | 2026-11-07 01:24 UTC | 2026-11-07 01:14 UTC |
| 64.49.11.136 | ip |
55
|
1 | GB | 2026-11-07 01:04 UTC | 2026-11-07 01:04 UTC |
| 216.25.90.86 | ip |
18
|
1 | US | 2026-11-07 01:02 UTC | 2026-11-07 01:02 UTC |
| 161.193.1.170 | ip |
45
|
1 | US | 2026-11-07 00:45 UTC | 2026-11-07 00:45 UTC |
| 86.38.187.178 | ip |
39
|
1 | LT | 2026-11-07 00:44 UTC | 2026-11-07 00:44 UTC |
| 98.159.37.84 | ip |
91
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.85 | ip |
99
|
6 | US | 2026-11-07 00:36 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.155 | ip |
100
|
12 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.159 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.165 | ip |
100
|
8 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.153 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.156 | ip |
100
|
8 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.158 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.154 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.81 | ip |
100
|
11 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.151 | ip |
100
|
8 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.174 | ip |
100
|
11 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.52 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.79 | ip |
98
|
7 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.150 | ip |
91
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.161 | ip |
95
|
5 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
Showing 1-25 of 87692 indicators