IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 34.70.197.149 ip

Score
100
/100
raw: 1530.89
Reports
166
Last Reported
2026-11-14 18:06 UTC
Categories
Scanning (115) Config Exposure Probe (46) API Probe (2) Admin Panel Probe (2) Web Stack Probe (1)

Network details

ASN
396982
Organization
Google LLC
Country
US

Threat Intelligence enriched 2026-11-14 18:05 UTC

Reverse DNS
149.197.70.34.bc.googleusercontent.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-14 18:05 UTC catch-all-cms direct GET /wp-emoji-release.min.js
2026-11-14 18:04 UTC build-artifact direct GET /composer.json burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /sftp-config.json burst
2026-11-14 18:04 UTC build-artifact direct GET /package.json burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /parameters.yml burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /config.yml burst
2026-11-14 18:04 UTC actuator direct GET /actuator/env burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /babel.config.js burst
2026-11-14 18:04 UTC catch-all-scan direct GET /register burst
2026-11-14 18:04 UTC catch-all-scan direct GET /hits burst
2026-11-14 18:04 UTC build-artifact direct GET /webpack.config.js burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /database.json burst
2026-11-14 18:04 UTC catch-all-scan direct GET /heartbeat burst
2026-11-14 18:04 UTC catch-all-scan direct GET /netlify.toml burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /.bash_history burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /web.config burst
2026-11-14 18:04 UTC sql-dump direct GET /dump.sql burst
2026-11-14 18:04 UTC catch-all-suspicious direct GET /config.yaml burst
2026-11-14 18:04 UTC laravel-log direct GET /storage/logs/laravel.log burst
2026-11-14 18:04 UTC sql-dump direct GET /db.sql burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
37.40.239.130 ip
50
 1 OM 2026-11-14 18:26 UTC 2026-11-14 18:26 UTC
38.9.221.233 ip
39
 1 CO 2026-11-14 18:25 UTC 2026-11-14 18:25 UTC
170.78.244.33 ip
50
 1 BR 2026-11-14 18:25 UTC 2026-11-14 18:25 UTC
176.111.187.171 ip
39
 1 UA 2026-11-14 18:25 UTC 2026-11-14 18:25 UTC
95.86.136.85 ip
39
 1 AZ 2026-11-14 18:25 UTC 2026-11-14 18:25 UTC
201.184.52.237 ip
39
 1 CO 2026-11-14 18:24 UTC 2026-11-14 18:24 UTC
103.179.15.149 ip
50
 1 BD 2026-11-14 18:24 UTC 2026-11-14 18:24 UTC
163.227.195.137 ip
39
 1 BD 2026-11-14 18:24 UTC 2026-11-14 18:24 UTC
185.249.108.123 ip
39
 1 ES 2026-11-14 18:24 UTC 2026-11-14 18:24 UTC
190.89.91.192 ip
50
 1 BR 2026-11-14 18:24 UTC 2026-11-14 18:24 UTC
39.34.191.186 ip
39
 1 PK 2026-11-14 18:23 UTC 2026-11-14 18:23 UTC
201.141.17.69 ip
39
 1 MX 2026-11-14 18:23 UTC 2026-11-14 18:23 UTC
187.189.33.80 ip
39
 1 MX 2026-11-14 18:23 UTC 2026-11-14 18:23 UTC
69.160.102.40 ip
39
 1 JM 2026-11-14 18:22 UTC 2026-11-14 18:22 UTC
179.238.45.63 ip
50
 1 AR 2026-11-14 18:22 UTC 2026-11-14 18:22 UTC
170.238.196.158 ip
50
 1 BR 2026-11-14 18:22 UTC 2026-11-14 18:22 UTC
89.105.234.187 ip
39
 1 UA 2026-11-14 18:21 UTC 2026-11-14 18:21 UTC
89.19.113.98 ip
39
 1 UA 2026-11-14 18:21 UTC 2026-11-14 18:21 UTC
178.165.179.116 ip
50
 1 AT 2026-11-14 18:19 UTC 2026-11-14 18:19 UTC
116.98.254.165 ip
50
 1 VN 2026-11-14 18:19 UTC 2026-11-14 18:19 UTC
200.31.240.244 ip
50
 1 AR 2026-11-14 18:18 UTC 2026-11-14 18:18 UTC
153.92.1.227 ip
100
 10 LT 2026-11-14 18:19 UTC 2026-11-14 18:18 UTC
41.208.141.160 ip
39
 1 SN 2026-11-14 18:17 UTC 2026-11-14 18:17 UTC
181.15.81.149 ip
39
 1 AR 2026-11-14 18:16 UTC 2026-11-14 18:16 UTC
188.0.31.128 ip
39
 1 RU 2026-11-14 18:16 UTC 2026-11-14 18:16 UTC

Showing 1-25 of 102528 indicators