IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.152.4.166 ip

Score
100
/100
raw: 239.89
Reports
26
Last Reported
2026-11-15 01:39 UTC
Categories
Scanning (17) Config Exposure Probe (9)

Network details

ASN
396982
Organization
Google LLC
Country
CA

Threat Intelligence enriched 2026-11-15 01:38 UTC

Reverse DNS
166.4.152.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-15 01:38 UTC catch-all-suspicious direct GET /google-key.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /google-credentials.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /credentials.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /gcp-sa.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /gcp-credentials.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /gcp-key.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /sa.json burst
2026-11-15 01:38 UTC catch-all-suspicious direct GET /service-account.json burst
2026-11-15 01:38 UTC catch-all-scan direct GET /phpinfo burst
2026-11-15 01:38 UTC catch-all-script direct GET /test.php burst
2026-11-15 01:38 UTC catch-all-script direct GET /pinfo.php burst
2026-11-15 01:38 UTC catch-all-script direct GET /pi.php burst
2026-11-15 01:38 UTC catch-all-script direct GET /i.php burst
2026-11-15 01:38 UTC catch-all-script direct GET /php.php burst
2026-11-15 01:38 UTC catch-all-script direct GET /info.php burst
2026-11-15 01:38 UTC catch-all-script direct GET /phpinfo.php burst
2026-11-15 01:37 UTC catch-all-config direct GET /.env.bak burst
2026-11-15 01:37 UTC catch-all-config direct GET /.env.remote burst
2026-11-15 01:37 UTC catch-all-config direct GET /.env.test burst
2026-11-15 01:37 UTC catch-all-config direct GET /.env.development burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
149.62.51.56 ip
50
 1 RU 2026-11-15 01:51 UTC 2026-11-15 01:51 UTC
94.158.60.31 ip
50
 1 UZ 2026-11-15 01:51 UTC 2026-11-15 01:51 UTC
41.249.110.247 ip
50
 1 MA 2026-11-15 01:51 UTC 2026-11-15 01:51 UTC
146.120.251.52 ip
50
 1 UA 2026-11-15 01:51 UTC 2026-11-15 01:51 UTC
179.182.176.125 ip
50
 1 BR 2026-11-15 01:51 UTC 2026-11-15 01:51 UTC
189.237.18.187 ip
39
 1 MX 2026-11-15 01:50 UTC 2026-11-15 01:50 UTC
170.231.133.228 ip
39
 1 BR 2026-11-15 01:50 UTC 2026-11-15 01:50 UTC
201.221.115.14 ip
39
 1 VE 2026-11-15 01:49 UTC 2026-11-15 01:49 UTC
105.155.198.158 ip
50
 1 MA 2026-11-15 01:49 UTC 2026-11-15 01:49 UTC
45.190.6.60 ip
39
 1 BR 2026-11-15 01:49 UTC 2026-11-15 01:49 UTC
152.59.82.51 ip
39
 1 IN 2026-11-15 01:48 UTC 2026-11-15 01:48 UTC
193.19.253.41 ip
39
 1 UA 2026-11-15 01:48 UTC 2026-11-15 01:48 UTC
190.14.233.113 ip
39
 1 CO 2026-11-15 01:48 UTC 2026-11-15 01:48 UTC
153.79.184.45 ip
50
 1 RU 2026-11-15 01:48 UTC 2026-11-15 01:48 UTC
152.231.156.61 ip
39
 1 CR 2026-11-15 01:48 UTC 2026-11-15 01:48 UTC
146.158.111.131 ip
50
 1 RU 2026-11-15 01:47 UTC 2026-11-15 01:47 UTC
209.87.169.169 ip
80
 4 US 2026-11-15 01:47 UTC 2026-11-15 01:47 UTC
91.240.103.198 ip
50
 1 RU 2026-11-15 01:47 UTC 2026-11-15 01:47 UTC
103.58.97.21 ip
39
 1 IN 2026-11-15 01:46 UTC 2026-11-15 01:46 UTC
176.159.141.85 ip
50
 1 FR 2026-11-15 01:45 UTC 2026-11-15 01:45 UTC
186.42.1.105 ip
39
 1 EC 2026-11-15 01:43 UTC 2026-11-15 01:43 UTC
181.229.40.11 ip
39
 1 AR 2026-11-15 01:41 UTC 2026-11-15 01:41 UTC
187.189.136.4 ip
50
 1 MX 2026-11-15 01:41 UTC 2026-11-15 01:41 UTC
189.203.27.211 ip
39
 1 MX 2026-11-15 01:41 UTC 2026-11-15 01:41 UTC
190.120.62.225 ip
50
 1 AR 2026-11-15 01:40 UTC 2026-11-15 01:40 UTC

Showing 1-25 of 103489 indicators