IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 18.197.144.27 ip

Score
20
/100
raw: 2.23
Reports
602
Last Reported
2026-06-03 04:23 UTC
Categories
Config Exposure Probe (402) Scanning (152) API Probe (22) Admin Panel Probe (14) Web Stack Probe (12)

Network details

ASN
16509
Organization
Amazon.com, Inc.
Country
DE

Threat Intelligence enriched 2026-11-04 11:03 UTC

Reverse DNS
ec2-18-197-144-27.eu-central-1.compute.amazonaws.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-03 04:21 UTC catch-all-suspicious direct GET /config/initializers/secret_token.rb
2026-06-03 04:21 UTC catch-all-suspicious direct GET /config/credentials.yml.enc
2026-06-03 04:21 UTC catch-all-suspicious direct GET /config/master.key
2026-06-03 04:21 UTC catch-all-suspicious direct GET /config/secrets.yml
2026-06-03 04:21 UTC catch-all-suspicious direct GET /config/database.yml
2026-06-03 04:20 UTC catch-all-suspicious direct GET /appsettings.Staging.json
2026-06-03 04:20 UTC catch-all-suspicious direct GET /appsettings.Production.json
2026-06-03 04:20 UTC catch-all-suspicious direct GET /appsettings.Development.json
2026-06-03 04:20 UTC catch-all-suspicious direct GET /appsettings.json
2026-06-03 04:20 UTC catch-all-suspicious direct GET /web.config.txt
2026-06-03 04:20 UTC catch-all-backup direct GET /web.config.old
2026-06-03 04:20 UTC catch-all-backup direct GET /web.config.bak
2026-06-03 04:19 UTC catch-all-suspicious direct GET /web.config
2026-06-03 04:19 UTC catch-all-suspicious direct GET /META-INF/context.xml
2026-06-03 04:19 UTC catch-all-suspicious direct GET /WEB-INF/web.xml burst
2026-06-03 04:19 UTC catch-all-scan direct GET /application-staging.properties burst
2026-06-03 04:19 UTC catch-all-scan direct GET /application-dev.properties burst
2026-06-03 04:19 UTC catch-all-suspicious direct GET /application-production.yml burst
2026-06-03 04:19 UTC catch-all-suspicious direct GET /application-prod.yml burst
2026-06-03 04:18 UTC catch-all-scan direct GET /application-prod.properties burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
45.132.184.238 ip
39
 1 RU 2026-11-08 06:59 UTC 2026-11-08 06:59 UTC
45.138.12.90 ip
88
 3 LT 2026-11-08 06:46 UTC 2026-11-08 06:45 UTC
167.172.223.114 ip
85
 3 US 2026-11-08 06:44 UTC 2026-11-08 06:44 UTC
167.99.97.227 ip
100
 12 US 2026-11-08 07:12 UTC 2026-11-08 06:33 UTC
207.154.237.236 ip
18
 1 DE 2026-11-08 06:32 UTC 2026-11-08 06:32 UTC
172.64.200.56 ip
45
 1 PL 2026-11-08 06:30 UTC 2026-11-08 06:30 UTC
172.64.200.110 ip
45
 1 PL 2026-11-08 06:30 UTC 2026-11-08 06:30 UTC
191.101.106.5 ip
50
 1 DE 2026-11-08 06:26 UTC 2026-11-08 06:26 UTC
164.90.194.154 ip
100
 24 NL 2026-11-08 07:12 UTC 2026-11-08 06:25 UTC
138.197.149.214 ip
100
 22 CA 2026-11-08 07:07 UTC 2026-11-08 06:23 UTC
181.113.117.118 ip
50
 1 EC 2026-11-08 06:22 UTC 2026-11-08 06:22 UTC
159.223.211.203 ip
100
 16 NL 2026-11-08 07:12 UTC 2026-11-08 06:20 UTC
159.89.152.178 ip
100
 17 US 2026-11-08 07:11 UTC 2026-11-08 06:19 UTC
34.65.168.130 ip
100
 26 CH 2026-11-08 06:20 UTC 2026-11-08 06:19 UTC
143.198.41.97 ip
85
 3 CA 2026-11-08 06:18 UTC 2026-11-08 06:18 UTC
146.190.252.59 ip
100
 34 CA 2026-11-08 07:11 UTC 2026-11-08 06:18 UTC
34.91.26.117 ip
100
 10 NL 2026-11-08 06:14 UTC 2026-11-08 06:14 UTC
34.53.147.106 ip
100
 121 BE 2026-11-08 06:13 UTC 2026-11-08 06:12 UTC
143.110.211.119 ip
100
 18 CA 2026-11-08 07:11 UTC 2026-11-08 06:08 UTC
134.209.193.154 ip
100
 13 NL 2026-11-08 07:10 UTC 2026-11-08 06:07 UTC
46.101.77.187 ip
100
 14 GB 2026-11-08 07:11 UTC 2026-11-08 06:05 UTC
35.210.239.143 ip
33
 1 BE 2026-11-08 06:05 UTC 2026-11-08 06:05 UTC
138.197.71.186 ip
100
 11 US 2026-11-08 07:07 UTC 2026-11-08 06:05 UTC
64.227.112.221 ip
100
 25 DE 2026-11-08 07:12 UTC 2026-11-08 06:03 UTC
137.59.229.73 ip
18
 1 PK 2026-11-08 06:02 UTC 2026-11-08 06:02 UTC

Showing 1-25 of 88351 indicators