IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.15.152.106 ip

Score
100
/100
raw: 239.55
Reports
26
Last Reported
2026-11-11 02:11 UTC
Categories
Scanning (17) Config Exposure Probe (9)

Network details

ASN
396982
Organization
Google LLC
Country
TH

Threat Intelligence enriched 2026-11-11 02:09 UTC

Reverse DNS
106.152.15.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-11 02:10 UTC catch-all-suspicious direct GET /google-key.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /google-credentials.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /credentials.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /gcp-sa.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /gcp-credentials.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /gcp-key.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /sa.json burst
2026-11-11 02:10 UTC catch-all-suspicious direct GET /service-account.json burst
2026-11-11 02:10 UTC catch-all-scan direct GET /phpinfo burst
2026-11-11 02:10 UTC catch-all-script direct GET /test.php burst
2026-11-11 02:10 UTC catch-all-script direct GET /pinfo.php burst
2026-11-11 02:10 UTC catch-all-script direct GET /pi.php burst
2026-11-11 02:10 UTC catch-all-script direct GET /i.php burst
2026-11-11 02:10 UTC catch-all-script direct GET /php.php burst
2026-11-11 02:10 UTC catch-all-script direct GET /info.php burst
2026-11-11 02:09 UTC catch-all-script direct GET /phpinfo.php burst
2026-11-11 02:09 UTC catch-all-config direct GET /.env.bak burst
2026-11-11 02:09 UTC catch-all-config direct GET /.env.remote burst
2026-11-11 02:09 UTC catch-all-config direct GET /.env.test burst
2026-11-11 02:09 UTC catch-all-config direct GET /.env.development burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
20.118.211.140 ip
18
 1 US 2026-11-11 03:03 UTC 2026-11-11 03:03 UTC
159.89.195.222 ip
18
 1 SG 2026-11-11 02:58 UTC 2026-11-11 02:58 UTC
144.172.110.67 ip
45
 1 US 2026-11-11 02:57 UTC 2026-11-11 02:57 UTC
34.17.66.102 ip
100
 52 IT 2026-11-11 02:49 UTC 2026-11-11 02:46 UTC
35.210.176.28 ip
55
 2 BE 2026-11-11 02:41 UTC 2026-11-11 02:41 UTC
191.177.175.104 ip
100
 15 BR 2026-11-11 02:31 UTC 2026-11-11 02:28 UTC
170.231.140.71 ip
100
 17 BR 2026-11-11 02:31 UTC 2026-11-11 02:28 UTC
111.242.176.6 ip
100
 16 TW 2026-11-11 02:31 UTC 2026-11-11 02:28 UTC
190.31.53.205 ip
100
 15 AR 2026-11-11 02:30 UTC 2026-11-11 02:28 UTC
187.184.7.62 ip
100
 11 MX 2026-11-11 02:30 UTC 2026-11-11 02:28 UTC
103.179.240.150 ip
18
 1 PK 2026-11-11 02:27 UTC 2026-11-11 02:27 UTC
200.162.155.121 ip
100
 118 BA 2026-11-11 02:17 UTC 2026-11-11 02:17 UTC
35.210.135.54 ip
55
 2 BE 2026-11-11 02:12 UTC 2026-11-11 02:12 UTC
34.15.152.106 ip
100
 26 TH 2026-11-11 02:11 UTC 2026-11-11 02:09 UTC
159.69.205.3 ip
50
 1 DE 2026-11-11 01:59 UTC 2026-11-11 01:59 UTC
188.71.230.222 ip
100
 13 KW 2026-11-11 01:58 UTC 2026-11-11 01:56 UTC
178.218.29.120 ip
78
 3 RU 2026-11-11 01:56 UTC 2026-11-11 01:55 UTC
45.173.240.181 ip
100
 15 BR 2026-11-11 01:58 UTC 2026-11-11 01:55 UTC
82.215.127.170 ip
100
 16 UZ 2026-11-11 01:59 UTC 2026-11-11 01:55 UTC
191.112.45.47 ip
100
 13 CL 2026-11-11 01:58 UTC 2026-11-11 01:55 UTC
124.109.51.210 ip
100
 29 PK 2026-11-11 01:52 UTC 2026-11-11 01:48 UTC
154.27.140.253 ip
100
 29 VE 2026-11-11 01:52 UTC 2026-11-11 01:48 UTC
139.135.59.175 ip
18
 1 PK 2026-11-11 01:48 UTC 2026-11-11 01:48 UTC
51.15.114.38 ip
33
 2 NL 2026-11-11 01:47 UTC 2026-11-11 01:47 UTC
162.158.95.196 ip
70
 2 US 2026-11-11 01:44 UTC 2026-11-11 01:44 UTC

Showing 1-25 of 92290 indicators