IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 103.28.36.168 ip

Score
6
/100
raw: 0.59
Reports
38
Last Reported
2026-08-05 11:42 UTC
Categories
Web Stack Probe (32) Scanning (3) API Probe (2) Credential Stuffing (1)

Network details

ASN
131353
Organization
NhanHoa Software company
Country
VN

Threat Intelligence enriched 2026-11-04 11:01 UTC

Reverse DNS
wordpress-hosting09.nhanhoa.com

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-08-05 07:56 UTC wp-json direct GET /wp-json/wp/v2/users
2026-08-03 21:51 UTC catch-all-cms direct GET /wp-sitemap-users-1.xml
2026-08-03 19:04 UTC wp-json direct GET /wp-json/wp/v2/users
2026-07-28 08:59 UTC xmlrpc direct POST /xmlrpc.php
2026-07-28 08:46 UTC wp-json direct GET /wp-json/oembed/1.0/embed
2026-07-28 04:40 UTC catch-all-suspicious direct GET /sitemap_index.xml
2026-07-27 23:17 UTC catch-all-cms direct GET /wp/wp-json/wp/v2/users
2026-07-27 14:05 UTC api direct POST /api/graphql
2026-07-22 06:28 UTC wp-json direct GET /wp-json/wp/v2/users
2026-07-22 03:31 UTC wp-json direct GET /wp-json/wp/v2/users
2026-07-04 03:43 UTC wp-json direct GET /wp-json/elementor/v1/globals
2026-07-03 19:03 UTC wp-json direct GET /wp-json/wp/v2/users
2026-07-03 17:21 UTC wp-json direct GET /wp-json/wp/v2/users
2026-07-03 16:34 UTC wp-json direct GET /wp-json/wp/v2/users
2026-07-03 11:25 UTC catch-all-suspicious direct GET /sitemap_index.xml
2026-06-24 06:02 UTC wp-login direct POST /wp-login.php creds
2026-06-24 06:02 UTC wp-login direct GET /wp-login.php
2026-06-24 00:31 UTC api direct POST /api/graphql
2026-06-23 16:21 UTC wp-json direct GET /wp-json/ultimate-member/v1/users
2026-06-19 19:10 UTC wp-json direct GET /wp-json/rankmath/v1/getHead

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
138.197.71.186 ip
85
 3 US 2026-11-08 06:05 UTC 2026-11-08 06:05 UTC
64.227.112.221 ip
85
 3 DE 2026-11-08 06:03 UTC 2026-11-08 06:03 UTC
137.59.229.73 ip
18
 1 PK 2026-11-08 06:02 UTC 2026-11-08 06:02 UTC
64.227.108.115 ip
93
 4 US 2026-11-08 06:02 UTC 2026-11-08 06:02 UTC
82.148.238.114 ip
86
 3 GB 2026-11-08 05:57 UTC 2026-11-08 05:57 UTC
45.132.186.228 ip
39
 1 RU 2026-11-08 05:55 UTC 2026-11-08 05:55 UTC
5.253.235.93 ip
100
 52 FR 2026-11-08 05:54 UTC 2026-11-08 05:54 UTC
172.64.198.59 ip
45
 1 PL 2026-11-08 05:38 UTC 2026-11-08 05:38 UTC
172.64.198.75 ip
45
 1 PL 2026-11-08 05:38 UTC 2026-11-08 05:38 UTC
144.172.115.165 ip
45
 1 US 2026-11-08 05:38 UTC 2026-11-08 05:38 UTC
34.174.43.99 ip
100
 109 US 2026-11-08 05:39 UTC 2026-11-08 05:37 UTC
151.115.51.151 ip
33
 2 PL 2026-11-08 05:35 UTC 2026-11-08 05:35 UTC
46.253.131.237 ip
39
 1 US 2026-11-08 05:34 UTC 2026-11-08 05:34 UTC
172.64.200.81 ip
45
 1 PL 2026-11-08 05:33 UTC 2026-11-08 05:33 UTC
2.59.218.233 ip
50
 1 BG 2026-11-08 05:20 UTC 2026-11-08 05:20 UTC
40.124.82.201 ip
18
 1 US 2026-11-08 05:19 UTC 2026-11-08 05:19 UTC
4.150.201.241 ip
18
 1 US 2026-11-08 05:15 UTC 2026-11-08 05:15 UTC
159.223.88.24 ip
18
 1 SG 2026-11-08 05:15 UTC 2026-11-08 05:15 UTC
20.163.169.57 ip
18
 1 US 2026-11-08 05:13 UTC 2026-11-08 05:13 UTC
40.119.41.254 ip
18
 1 US 2026-11-08 05:12 UTC 2026-11-08 05:12 UTC
20.40.233.168 ip
18
 1 US 2026-11-08 05:12 UTC 2026-11-08 05:12 UTC
20.80.87.79 ip
18
 1 US 2026-11-08 05:10 UTC 2026-11-08 05:10 UTC
4.148.17.174 ip
18
 1 US 2026-11-08 05:09 UTC 2026-11-08 05:09 UTC
34.79.37.102 ip
100
 121 BE 2026-11-08 04:58 UTC 2026-11-08 04:57 UTC
34.76.228.132 ip
100
 120 BE 2026-11-08 04:58 UTC 2026-11-08 04:57 UTC

Showing 1-25 of 88329 indicators