IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 164.152.27.118 ip
Score
100
/100
raw: 523.26
Reports
70
Last Reported
2026-11-08 23:27 UTC
Categories
Scanning (54)
Config Exposure Probe (15)
API Probe (1)
Network details
ASN
31898
Organization
Oracle Corporation
Country
US
Threat Intelligence enriched 2026-11-08 23:27 UTC
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /secrets.json | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /terraform.tfvars.json | burst |
| 2026-11-08 23:27 UTC | catch-all-scan | direct | GET | /terraform/terraform.tfstate | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /config/application.properties | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /docker-compose.yaml | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /appsettings.Production.json | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /digitalocean.yml | burst |
| 2026-11-08 23:27 UTC | catch-all-backup | direct | GET | /.config/doctl/config.yaml.bak | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /config/secrets.yml | burst |
| 2026-11-08 23:27 UTC | catch-all-config | direct | GET | /.env.production | burst |
| 2026-11-08 23:27 UTC | catch-all-scan | direct | GET | /[host] | burst |
| 2026-11-08 23:27 UTC | catch-all-config | direct | GET | /.env.local | burst |
| 2026-11-08 23:27 UTC | catch-all-backup | direct | GET | /terraform/terraform.tfstate.backup | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /kubeconfig | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /digitalocean.json | burst |
| 2026-11-08 23:27 UTC | catch-all-scan | direct | GET | /packer.pkr.hcl | burst |
| 2026-11-08 23:27 UTC | catch-all-scan | direct | GET | /infrastructure/terraform.tfstate | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /config/digitalocean.json | burst |
| 2026-11-08 23:27 UTC | catch-all-scan | direct | GET | /packer/variables.pkrvars.hcl | burst |
| 2026-11-08 23:27 UTC | catch-all-suspicious | direct | GET | /.do/app.yaml | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 179.60.72.52 | ip |
50
|
1 | CL | 2026-11-09 00:07 UTC | 2026-11-09 00:07 UTC |
| 27.145.148.121 | ip |
50
|
1 | TH | 2026-11-09 00:07 UTC | 2026-11-09 00:07 UTC |
| 167.250.40.100 | ip |
50
|
1 | BR | 2026-11-09 00:07 UTC | 2026-11-09 00:07 UTC |
| 91.235.227.246 | ip |
50
|
1 | UA | 2026-11-09 00:06 UTC | 2026-11-09 00:06 UTC |
| 161.142.146.0 | ip |
39
|
1 | MY | 2026-11-09 00:05 UTC | 2026-11-09 00:05 UTC |
| 79.117.194.129 | ip |
50
|
1 | ES | 2026-11-09 00:05 UTC | 2026-11-09 00:05 UTC |
| 190.83.116.46 | ip |
50
|
1 | HN | 2026-11-09 00:05 UTC | 2026-11-09 00:05 UTC |
| 178.151.254.56 | ip |
50
|
1 | UA | 2026-11-09 00:04 UTC | 2026-11-09 00:04 UTC |
| 105.246.241.157 | ip |
39
|
1 | ZA | 2026-11-09 00:04 UTC | 2026-11-09 00:04 UTC |
| 187.189.172.204 | ip |
50
|
1 | MX | 2026-11-09 00:02 UTC | 2026-11-09 00:02 UTC |
| 38.211.69.25 | ip |
39
|
1 | CO | 2026-11-09 00:02 UTC | 2026-11-09 00:02 UTC |
| 95.24.32.243 | ip |
39
|
1 | RU | 2026-11-09 00:01 UTC | 2026-11-09 00:01 UTC |
| 154.39.145.72 | ip |
39
|
1 | VE | 2026-11-08 23:58 UTC | 2026-11-08 23:58 UTC |
| 34.28.179.143 | ip |
100
|
26 | US | 2026-11-08 23:58 UTC | 2026-11-08 23:57 UTC |
| 181.78.66.217 | ip |
50
|
1 | CO | 2026-11-08 23:57 UTC | 2026-11-08 23:57 UTC |
| 186.179.192.124 | ip |
50
|
1 | SR | 2026-11-08 23:56 UTC | 2026-11-08 23:56 UTC |
| 188.163.7.80 | ip |
50
|
1 | UA | 2026-11-08 23:56 UTC | 2026-11-08 23:56 UTC |
| 81.177.254.146 | ip |
39
|
1 | RU | 2026-11-08 23:55 UTC | 2026-11-08 23:55 UTC |
| 136.169.237.90 | ip |
39
|
1 | RU | 2026-11-08 23:55 UTC | 2026-11-08 23:55 UTC |
| 105.154.245.107 | ip |
39
|
1 | MA | 2026-11-08 23:53 UTC | 2026-11-08 23:53 UTC |
| 209.50.167.79 | ip |
50
|
1 | US | 2026-11-08 23:52 UTC | 2026-11-08 23:52 UTC |
| 216.26.232.171 | ip |
50
|
1 | US | 2026-11-08 23:52 UTC | 2026-11-08 23:52 UTC |
| 104.207.38.238 | ip |
50
|
1 | US | 2026-11-08 23:52 UTC | 2026-11-08 23:52 UTC |
| 209.50.172.80 | ip |
50
|
1 | US | 2026-11-08 23:51 UTC | 2026-11-08 23:51 UTC |
| 177.104.3.135 | ip |
39
|
1 | BR | 2026-11-08 23:50 UTC | 2026-11-08 23:50 UTC |
Showing 1-25 of 89512 indicators