IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.138.84.20 ip

Score
3
/100
raw: 0.35
Reports
41
Last Reported
2026-06-22 02:13 UTC
Categories
Config Exposure Probe (24) Scanning (14) API Probe (2) Credential Stuffing (1)

Network details

ASN
396982
Organization
Google LLC
Country
US

Threat Intelligence enriched 2026-11-04 22:10 UTC

Reverse DNS
20.84.138.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-22 02:12 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-22 02:12 UTC iac-secrets direct GET /terraform.tfstate burst
2026-06-22 02:12 UTC catch-all-suspicious direct GET /.kube/config burst
2026-06-22 02:12 UTC catch-all-suspicious direct GET /application.yml burst
2026-06-22 02:12 UTC catch-all-scan direct GET /application.properties burst
2026-06-22 02:12 UTC catch-all-suspicious direct GET /web.config burst
2026-06-22 02:12 UTC catch-all-traversal direct GET /proc/self/environ burst
2026-06-22 02:12 UTC catch-all-scan direct GET /.npmrc burst
2026-06-22 02:11 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-06-22 02:11 UTC catch-all-backup direct GET /data/dump.sql burst
2026-06-22 02:11 UTC backup direct GET /backup/database.sql burst
2026-06-22 02:11 UTC sql-dump direct GET /dump.sql burst
2026-06-22 02:11 UTC catch-all-config direct GET /.htpasswd burst
2026-06-22 02:11 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-22 02:11 UTC catch-all-script direct GET /config/database.php burst
2026-06-22 02:11 UTC catch-all-script direct GET /includes/config.php burst
2026-06-22 02:11 UTC catch-all-script direct GET /config/config.php burst
2026-06-22 02:11 UTC config-php direct GET /config.php burst
2026-06-22 02:11 UTC actuator direct GET /actuator/logfile burst
2026-06-22 02:11 UTC actuator direct GET /actuator/env burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
20.118.211.140 ip
18
1 US 2026-11-11 03:03 UTC 2026-11-11 03:03 UTC
159.89.195.222 ip
18
1 SG 2026-11-11 02:58 UTC 2026-11-11 02:58 UTC
144.172.110.67 ip
45
1 US 2026-11-11 02:57 UTC 2026-11-11 02:57 UTC
34.17.66.102 ip
100
52 IT 2026-11-11 02:49 UTC 2026-11-11 02:46 UTC
35.210.176.28 ip
55
2 BE 2026-11-11 02:41 UTC 2026-11-11 02:41 UTC
191.177.175.104 ip
100
15 BR 2026-11-11 02:31 UTC 2026-11-11 02:28 UTC
170.231.140.71 ip
100
17 BR 2026-11-11 02:31 UTC 2026-11-11 02:28 UTC
111.242.176.6 ip
100
16 TW 2026-11-11 02:31 UTC 2026-11-11 02:28 UTC
190.31.53.205 ip
100
15 AR 2026-11-11 02:30 UTC 2026-11-11 02:28 UTC
187.184.7.62 ip
100
11 MX 2026-11-11 02:30 UTC 2026-11-11 02:28 UTC
103.179.240.150 ip
18
1 PK 2026-11-11 02:27 UTC 2026-11-11 02:27 UTC
200.162.155.121 ip
100
118 BA 2026-11-11 02:17 UTC 2026-11-11 02:17 UTC
35.210.135.54 ip
55
2 BE 2026-11-11 02:12 UTC 2026-11-11 02:12 UTC
34.15.152.106 ip
100
26 TH 2026-11-11 02:11 UTC 2026-11-11 02:09 UTC
159.69.205.3 ip
50
1 DE 2026-11-11 01:59 UTC 2026-11-11 01:59 UTC
188.71.230.222 ip
100
13 KW 2026-11-11 01:58 UTC 2026-11-11 01:56 UTC
178.218.29.120 ip
78
3 RU 2026-11-11 01:56 UTC 2026-11-11 01:55 UTC
45.173.240.181 ip
100
15 BR 2026-11-11 01:58 UTC 2026-11-11 01:55 UTC
82.215.127.170 ip
100
16 UZ 2026-11-11 01:59 UTC 2026-11-11 01:55 UTC
191.112.45.47 ip
100
13 CL 2026-11-11 01:58 UTC 2026-11-11 01:55 UTC
124.109.51.210 ip
100
29 PK 2026-11-11 01:52 UTC 2026-11-11 01:48 UTC
154.27.140.253 ip
100
29 VE 2026-11-11 01:52 UTC 2026-11-11 01:48 UTC
139.135.59.175 ip
18
1 PK 2026-11-11 01:48 UTC 2026-11-11 01:48 UTC
51.15.114.38 ip
33
2 NL 2026-11-11 01:47 UTC 2026-11-11 01:47 UTC
162.158.95.196 ip
70
2 US 2026-11-11 01:44 UTC 2026-11-11 01:44 UTC

Showing 1-25 of 92290 indicators