IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 18.206.227.70 ip
Score
100
/100
raw: 81.92
Reports
10
Last Reported
2026-11-09 00:56 UTC
Categories
Config Exposure Probe (8)
Scanning (2)
Network details
ASN
14618
Organization
Amazon.com, Inc.
Country
US
Threat Intelligence enriched 2026-11-09 00:55 UTC
Reverse DNS
ec2-18-206-227-70.compute-1.amazonaws.com
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-09 00:55 UTC | git-head | direct | GET | /.git/HEAD | burst |
| 2026-11-09 00:55 UTC | catch-all-scan | direct | GET | /info/refs | burst |
| 2026-11-09 00:55 UTC | git-probe | direct | GET | /.git/info/refs | burst |
| 2026-11-09 00:55 UTC | catch-all-suspicious | direct | GET | /WEB-INF/web.xml | burst |
| 2026-11-09 00:55 UTC | ds-store | direct | GET | /.DS_Store | burst |
| 2026-11-09 00:55 UTC | bzr-probe | direct | GET | /.bzr/branch/branch.conf | burst |
| 2026-11-09 00:55 UTC | hg-probe | direct | GET | /.hg/dirstate | |
| 2026-11-09 00:55 UTC | hg-probe | direct | GET | /.hg/store/fncache | |
| 2026-11-09 00:55 UTC | svn-probe | direct | GET | /.svn/wc.db | |
| 2026-11-09 00:55 UTC | svn-probe | direct | GET | /.svn/entries |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 190.114.90.221 | ip |
39
|
1 | AR | 2026-11-09 01:23 UTC | 2026-11-09 01:23 UTC |
| 172.190.106.37 | ip |
18
|
1 | US | 2026-11-09 01:23 UTC | 2026-11-09 01:23 UTC |
| 13.89.123.1 | ip |
18
|
1 | US | 2026-11-09 01:22 UTC | 2026-11-09 01:22 UTC |
| 202.165.89.182 | ip |
39
|
1 | MM | 2026-11-09 01:22 UTC | 2026-11-09 01:22 UTC |
| 34.21.139.49 | ip |
100
|
127 | SG | 2026-11-09 01:22 UTC | 2026-11-09 01:21 UTC |
| 136.110.1.83 | ip |
100
|
434 | SG | 2026-11-09 01:22 UTC | 2026-11-09 01:20 UTC |
| 38.166.54.49 | ip |
50
|
1 | VE | 2026-11-09 01:19 UTC | 2026-11-09 01:19 UTC |
| 38.87.248.133 | ip |
39
|
1 | VE | 2026-11-09 01:19 UTC | 2026-11-09 01:19 UTC |
| 131.0.199.112 | ip |
50
|
1 | BO | 2026-11-09 01:18 UTC | 2026-11-09 01:18 UTC |
| 190.114.33.186 | ip |
39
|
1 | CL | 2026-11-09 01:17 UTC | 2026-11-09 01:17 UTC |
| 34.76.33.44 | ip |
100
|
120 | BE | 2026-11-09 01:18 UTC | 2026-11-09 01:17 UTC |
| 198.12.58.85 | ip |
50
|
1 | AR | 2026-11-09 01:16 UTC | 2026-11-09 01:16 UTC |
| 213.24.127.106 | ip |
50
|
1 | RU | 2026-11-09 01:14 UTC | 2026-11-09 01:14 UTC |
| 38.253.150.151 | ip |
50
|
1 | PE | 2026-11-09 01:13 UTC | 2026-11-09 01:13 UTC |
| 189.110.29.3 | ip |
50
|
1 | BR | 2026-11-09 01:13 UTC | 2026-11-09 01:13 UTC |
| 80.94.250.17 | ip |
39
|
1 | MD | 2026-11-09 01:12 UTC | 2026-11-09 01:12 UTC |
| 52.172.92.182 | ip |
45
|
1 | IN | 2026-11-09 01:11 UTC | 2026-11-09 01:11 UTC |
| 36.37.169.62 | ip |
39
|
1 | KH | 2026-11-09 01:10 UTC | 2026-11-09 01:10 UTC |
| 86.123.229.169 | ip |
39
|
1 | RO | 2026-11-09 01:08 UTC | 2026-11-09 01:08 UTC |
| 96.22.0.249 | ip |
39
|
1 | CA | 2026-11-09 01:08 UTC | 2026-11-09 01:08 UTC |
| 88.135.255.192 | ip |
50
|
1 | UA | 2026-11-09 01:08 UTC | 2026-11-09 01:08 UTC |
| 105.188.8.4 | ip |
50
|
1 | MA | 2026-11-09 01:07 UTC | 2026-11-09 01:07 UTC |
| 196.3.217.95 | ip |
50
|
1 | BB | 2026-11-09 01:06 UTC | 2026-11-09 01:06 UTC |
| 190.60.47.130 | ip |
39
|
1 | CO | 2026-11-09 01:06 UTC | 2026-11-09 01:06 UTC |
| 45.174.170.44 | ip |
39
|
1 | MX | 2026-11-09 01:06 UTC | 2026-11-09 01:06 UTC |
Showing 1-25 of 89615 indicators