IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.22.204.254 ip

Score
100
/100
raw: 1071.85
Reports
120
Last Reported
2026-11-09 23:35 UTC
Categories
Config Exposure Probe (71) Scanning (40) API Probe (5) Admin Panel Probe (3) Web Stack Probe (1)

Network details

ASN
396982
Organization
Google LLC
Country
BE

Threat Intelligence enriched 2026-11-09 23:35 UTC

Reverse DNS
254.204.22.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-09 23:34 UTC docker-registry direct GET /v2/.env burst
2026-11-09 23:34 UTC catch-all-framework direct GET /vendor/composer/installed.json burst
2026-11-09 23:34 UTC catch-all-suspicious direct GET /web.config burst
2026-11-09 23:34 UTC catch-all-config direct GET /web/.env burst
2026-11-09 23:34 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-11-09 23:34 UTC wp-content direct GET /wp-content/debug.log burst
2026-11-09 23:34 UTC catch-all-suspicious direct GET /sftp-config.json burst
2026-11-09 23:34 UTC api-version-enum direct GET /v1/.env burst
2026-11-09 23:34 UTC catch-all-config direct GET /test/.env burst
2026-11-09 23:34 UTC laravel-log direct GET /storage/logs/laravel.log burst
2026-11-09 23:34 UTC catch-all-config direct GET /staging/.env burst
2026-11-09 23:34 UTC catch-all-suspicious direct GET /runtime-config.js burst
2026-11-09 23:34 UTC catch-all-config direct GET /sendgrid.env burst
2026-11-09 23:34 UTC catch-all-scan direct GET /sentry.properties burst
2026-11-09 23:34 UTC server-status direct GET /server-info burst
2026-11-09 23:34 UTC catch-all-config direct GET /server/.env burst
2026-11-09 23:34 UTC catch-all-suspicious direct GET /settings.json burst
2026-11-09 23:34 UTC catch-all-script direct GET /settings.php burst
2026-11-09 23:34 UTC catch-all-config direct GET /src/.env burst
2026-11-09 23:34 UTC catch-all-suspicious direct GET /secrets.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
103.122.250.138 ip
50
1 BD 2026-11-10 00:32 UTC 2026-11-10 00:32 UTC
117.241.189.127 ip
50
1 IN 2026-11-10 00:32 UTC 2026-11-10 00:32 UTC
200.7.10.3 ip
50
1 BR 2026-11-10 00:31 UTC 2026-11-10 00:31 UTC
103.224.55.210 ip
50
1 BD 2026-11-10 00:30 UTC 2026-11-10 00:30 UTC
93.36.220.207 ip
50
1 IT 2026-11-10 00:30 UTC 2026-11-10 00:30 UTC
38.76.142.10 ip
50
1 EC 2026-11-10 00:30 UTC 2026-11-10 00:30 UTC
102.66.187.2 ip
50
1 ZA 2026-11-10 00:30 UTC 2026-11-10 00:30 UTC
177.234.192.65 ip
50
1 EC 2026-11-10 00:29 UTC 2026-11-10 00:29 UTC
45.170.65.189 ip
50
1 BR 2026-11-10 00:27 UTC 2026-11-10 00:27 UTC
193.168.177.209 ip
50
1 RU 2026-11-10 00:25 UTC 2026-11-10 00:25 UTC
195.211.213.199 ip
50
1 UA 2026-11-10 00:25 UTC 2026-11-10 00:25 UTC
190.83.121.235 ip
50
1 BR 2026-11-10 00:24 UTC 2026-11-10 00:24 UTC
189.28.223.26 ip
50
1 BR 2026-11-10 00:24 UTC 2026-11-10 00:24 UTC
179.64.79.215 ip
50
1 SN 2026-11-10 00:24 UTC 2026-11-10 00:24 UTC
186.121.161.235 ip
50
1 EC 2026-11-10 00:24 UTC 2026-11-10 00:24 UTC
213.230.78.66 ip
50
1 UZ 2026-11-10 00:22 UTC 2026-11-10 00:22 UTC
154.16.44.242 ip
39
1 GB 2026-11-10 00:19 UTC 2026-11-10 00:19 UTC
95.52.149.93 ip
50
1 RU 2026-11-10 00:18 UTC 2026-11-10 00:18 UTC
113.160.229.131 ip
50
1 VN 2026-11-10 00:18 UTC 2026-11-10 00:18 UTC
191.102.90.107 ip
50
1 CO 2026-11-10 00:17 UTC 2026-11-10 00:17 UTC
190.245.38.74 ip
50
1 AR 2026-11-10 00:16 UTC 2026-11-10 00:16 UTC
177.226.78.161 ip
50
1 MX 2026-11-10 00:16 UTC 2026-11-10 00:16 UTC
89.81.228.167 ip
50
1 FR 2026-11-10 00:13 UTC 2026-11-10 00:13 UTC
38.183.115.132 ip
50
1 VE 2026-11-10 00:13 UTC 2026-11-10 00:13 UTC
189.242.239.218 ip
50
1 MX 2026-11-10 00:12 UTC 2026-11-10 00:12 UTC

Showing 1-25 of 91133 indicators