IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 18.144.89.101 ip

Score
19
/100
raw: 2.16
Reports
1209
Last Reported
2026-05-13 02:01 UTC
Categories
Config Exposure Probe (872) Scanning (251) Admin Panel Probe (46) API Probe (36) Web Stack Probe (4)

Network details

ASN
16509
Organization
Amazon.com, Inc.
Country
US

Threat Intelligence enriched 2026-05-13 01:14 UTC

Reverse DNS
ec2-18-144-89-101.us-west-1.compute.amazonaws.com

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-13 02:00 UTC catch-all-script direct GET /helper/info.php burst
2026-05-13 02:00 UTC catch-all-script direct GET /crm/phpinfo.php burst
2026-05-13 02:00 UTC catch-all-script direct GET /develop/phpinfo.php burst
2026-05-13 02:00 UTC catch-all-script direct GET /crm/info.php
2026-05-13 02:00 UTC api direct GET /api/info.php
2026-05-13 02:00 UTC api direct GET /api/phpinfo.php
2026-05-13 02:00 UTC catch-all-script direct GET /xampp/phpinfo.php
2026-05-13 01:59 UTC backup direct GET /backup/phpinfo.php
2026-05-13 01:59 UTC backup direct GET /backup/info.php
2026-05-13 01:59 UTC catch-all-script direct GET /laravel/info.php
2026-05-13 01:59 UTC catch-all-script direct GET /service/phpinfo.php
2026-05-13 01:59 UTC catch-all-script direct GET /current/phpinfo.php
2026-05-13 01:59 UTC catch-all-script direct GET /services/info.php
2026-05-13 01:59 UTC catch-all-script direct GET /helper/info.php burst
2026-05-13 01:59 UTC catch-all-script direct GET /help/info.php
2026-05-13 01:59 UTC catch-all-script direct GET /crm/phpinfo.php burst
2026-05-13 01:58 UTC catch-all-script direct GET /development/phpinfo.php
2026-05-13 01:58 UTC catch-all-script direct GET /develop/phpinfo.php burst
2026-05-13 01:58 UTC catch-all-script direct GET /xampp/info.php
2026-05-13 01:58 UTC catch-all-script direct GET /crm/info.php

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
177.232.87.228 ip
50
 1 MX 2026-11-02 22:01 UTC 2026-11-02 22:01 UTC
181.118.37.37 ip
50
 1 TT 2026-11-02 22:00 UTC 2026-11-02 22:00 UTC
45.182.60.34 ip
50
 1 BR 2026-11-02 22:00 UTC 2026-11-02 22:00 UTC
190.4.127.80 ip
39
 1 AR 2026-11-02 21:59 UTC 2026-11-02 21:59 UTC
179.1.199.154 ip
50
 1 CO 2026-11-02 21:59 UTC 2026-11-02 21:59 UTC
174.138.190.126 ip
55
 1 US 2026-11-02 21:59 UTC 2026-11-02 21:59 UTC
37.114.149.27 ip
50
 1 AZ 2026-11-02 21:57 UTC 2026-11-02 21:57 UTC
210.195.165.73 ip
39
 1 MY 2026-11-02 21:57 UTC 2026-11-02 21:57 UTC
189.217.20.215 ip
39
 1 MX 2026-11-02 21:57 UTC 2026-11-02 21:57 UTC
190.60.46.246 ip
39
 1 CO 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
37.18.25.111 ip
50
 1 RU 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
181.23.23.250 ip
50
 1 AR 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
177.245.215.116 ip
39
 1 MX 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
102.178.175.34 ip
50
 1 BF 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
197.221.126.20 ip
39
 1 ZA 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
87.196.97.70 ip
50
 1 PT 2026-11-02 21:55 UTC 2026-11-02 21:55 UTC
88.168.236.106 ip
39
 1 FR 2026-11-02 21:54 UTC 2026-11-02 21:54 UTC
181.118.35.123 ip
39
 1 TT 2026-11-02 21:54 UTC 2026-11-02 21:54 UTC
189.171.218.221 ip
50
 1 MX 2026-11-02 21:54 UTC 2026-11-02 21:54 UTC
45.238.251.112 ip
50
 1 AR 2026-11-02 21:53 UTC 2026-11-02 21:53 UTC
179.60.143.153 ip
50
 1 BR 2026-11-02 21:51 UTC 2026-11-02 21:51 UTC
186.130.48.33 ip
39
 1 AR 2026-11-02 21:51 UTC 2026-11-02 21:51 UTC
178.210.226.177 ip
39
 1 IQ 2026-11-02 21:51 UTC 2026-11-02 21:51 UTC
187.190.184.108 ip
50
 1 MX 2026-11-02 21:50 UTC 2026-11-02 21:50 UTC
117.176.126.138 ip
50
 1 CN 2026-11-02 21:49 UTC 2026-11-02 21:49 UTC

Showing 1-25 of 84878 indicators