IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.56.171.131 ip

Score
100
/100
raw: 5366.13
Reports
573
Last Reported
2026-11-08 14:49 UTC
Categories
Scanning (353) Config Exposure Probe (220)

Network details

ASN
396982
Organization
Google LLC
Country
US

Threat Intelligence enriched 2026-11-08 14:19 UTC

Reverse DNS
131.171.56.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-08 14:49 UTC catch-all-scan direct GET /AGENTS.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /AGENTS.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /AGENTS.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:49 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:48 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:48 UTC catch-all-scan direct GET /CLAUDE.md burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst
2026-11-08 14:48 UTC catch-all-suspicious direct GET /.claude/.credentials.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
185.79.39.34 ip
50
1 ES 2026-11-08 14:49 UTC 2026-11-08 14:49 UTC
122.168.5.8 ip
39
1 IN 2026-11-08 14:47 UTC 2026-11-08 14:47 UTC
114.119.132.242 ip
18
1 SG 2026-11-08 14:47 UTC 2026-11-08 14:47 UTC
41.188.115.56 ip
50
1 MR 2026-11-08 14:47 UTC 2026-11-08 14:47 UTC
150.107.107.176 ip
39
1 NP 2026-11-08 14:47 UTC 2026-11-08 14:47 UTC
14.226.4.69 ip
50
1 VN 2026-11-08 14:47 UTC 2026-11-08 14:47 UTC
74.244.185.229 ip
50
1 BR 2026-11-08 14:44 UTC 2026-11-08 14:44 UTC
190.121.138.44 ip
39
1 CO 2026-11-08 14:44 UTC 2026-11-08 14:44 UTC
45.172.223.172 ip
50
1 CO 2026-11-08 14:43 UTC 2026-11-08 14:43 UTC
2.51.173.4 ip
39
1 AE 2026-11-08 14:41 UTC 2026-11-08 14:41 UTC
153.67.187.85 ip
39
1 AR 2026-11-08 14:41 UTC 2026-11-08 14:41 UTC
178.213.1.87 ip
50
1 UA 2026-11-08 14:41 UTC 2026-11-08 14:41 UTC
5.58.228.193 ip
39
1 UA 2026-11-08 14:40 UTC 2026-11-08 14:40 UTC
20.112.236.30 ip
18
1 US 2026-11-08 14:39 UTC 2026-11-08 14:39 UTC
213.200.15.47 ip
50
1 GE 2026-11-08 14:38 UTC 2026-11-08 14:38 UTC
20.65.169.181 ip
18
1 US 2026-11-08 14:37 UTC 2026-11-08 14:37 UTC
135.233.115.118 ip
18
1 US 2026-11-08 14:36 UTC 2026-11-08 14:36 UTC
196.3.215.2 ip
50
1 BB 2026-11-08 14:36 UTC 2026-11-08 14:36 UTC
170.81.109.90 ip
39
1 BR 2026-11-08 14:36 UTC 2026-11-08 14:36 UTC
20.106.177.215 ip
18
1 US 2026-11-08 14:36 UTC 2026-11-08 14:36 UTC
89.41.73.49 ip
39
1 MD 2026-11-08 14:35 UTC 2026-11-08 14:35 UTC
188.18.175.47 ip
39
1 RU 2026-11-08 14:35 UTC 2026-11-08 14:35 UTC
189.248.86.141 ip
50
1 MX 2026-11-08 14:34 UTC 2026-11-08 14:34 UTC
178.121.5.99 ip
50
1 BY 2026-11-08 14:33 UTC 2026-11-08 14:33 UTC
76.98.201.110 ip
39
1 US 2026-11-08 14:32 UTC 2026-11-08 14:32 UTC

Showing 1-25 of 88752 indicators