IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 103.28.36.216 ip
Score
1
/100
raw: 0.1
Reports
16
Last Reported
2026-07-04 04:39 UTC
Categories
Web Stack Probe (13)
Scanning (2)
API Probe (1)
Network details
ASN
131353
Organization
NhanHoa Software company
Country
VN
Threat Intelligence enriched 2026-11-04 04:02 UTC
Reverse DNS
share-dedi11.nhanhoa.com
DNSBL Status
Clean
Sensor Activity last 13 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-04 04:38 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/4 | |
| 2026-07-03 23:10 UTC | wp-json | direct | GET | /wp-json/ultimate-member/v1/users | |
| 2026-07-03 17:59 UTC | catch-all-suspicious | direct | GET | /author-sitemap.xml | |
| 2026-07-03 14:46 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-07-03 14:41 UTC | api | direct | POST | /api/graphql | |
| 2026-07-03 06:31 UTC | catch-all-cms | direct | GET | /wordpress/xmlrpc.php | |
| 2026-07-03 04:39 UTC | wp-json | direct | GET | /wp-json/wp/v2/posts | |
| 2026-06-19 16:55 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/8 | |
| 2026-06-13 07:55 UTC | xmlrpc | direct | POST | /xmlrpc.php | |
| 2026-06-02 19:33 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-05-30 18:39 UTC | catch-all-suspicious | direct | GET | /sitemap_index.xml | |
| 2026-05-21 09:37 UTC | wp-json | direct | GET | /wp-json/wp/v2/comments | |
| 2026-05-21 05:38 UTC | wp-json | direct | GET | /wp-json/wp/v2/posts |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 93.16.216.118 | ip |
50
|
1 | FR | 2026-11-05 14:02 UTC | 2026-11-05 14:02 UTC |
| 165.22.49.207 | ip |
99
|
7 | SG | 2026-11-05 13:59 UTC | 2026-11-05 13:57 UTC |
| 178.128.242.145 | ip |
94
|
4 | NL | 2026-11-05 13:56 UTC | 2026-11-05 13:56 UTC |
| 223.185.16.57 | ip |
39
|
1 | IN | 2026-11-05 13:52 UTC | 2026-11-05 13:52 UTC |
| 197.90.202.39 | ip |
39
|
1 | ZA | 2026-11-05 13:47 UTC | 2026-11-05 13:47 UTC |
| 5.206.57.48 | ip |
39
|
1 | RU | 2026-11-05 13:42 UTC | 2026-11-05 13:42 UTC |
| 188.240.59.50 | ip |
39
|
1 | GB | 2026-11-05 13:41 UTC | 2026-11-05 13:41 UTC |
| 77.220.194.196 | ip |
50
|
1 | RU | 2026-11-05 13:31 UTC | 2026-11-05 13:31 UTC |
| 172.68.193.177 | ip |
70
|
2 | DE | 2026-11-05 13:31 UTC | 2026-11-05 13:31 UTC |
| 162.158.110.50 | ip |
70
|
2 | DE | 2026-11-05 13:28 UTC | 2026-11-05 13:27 UTC |
| 203.162.234.154 | ip |
50
|
1 | VN | 2026-11-05 13:26 UTC | 2026-11-05 13:26 UTC |
| 142.86.3.245 | ip |
86
|
4 | CN | 2026-11-05 13:50 UTC | 2026-11-05 13:19 UTC |
| 181.199.255.90 | ip |
39
|
1 | GY | 2026-11-05 13:19 UTC | 2026-11-05 13:19 UTC |
| 103.85.15.14 | ip |
39
|
1 | ID | 2026-11-05 13:18 UTC | 2026-11-05 13:18 UTC |
| 20.102.109.163 | ip |
18
|
1 | US | 2026-11-05 13:15 UTC | 2026-11-05 13:15 UTC |
| 20.65.171.66 | ip |
18
|
1 | US | 2026-11-05 13:15 UTC | 2026-11-05 13:15 UTC |
| 73.204.56.30 | ip |
39
|
1 | US | 2026-11-05 13:10 UTC | 2026-11-05 13:10 UTC |
| 89.163.206.150 | ip |
39
|
1 | DE | 2026-11-05 13:10 UTC | 2026-11-05 13:10 UTC |
| 164.90.168.140 | ip |
80
|
6 | DE | 2026-11-05 12:57 UTC | 2026-11-05 12:57 UTC |
| 91.235.227.167 | ip |
39
|
1 | UA | 2026-11-05 12:48 UTC | 2026-11-05 12:48 UTC |
| 168.81.207.96 | ip |
26
|
1 | BR | 2026-11-05 12:37 UTC | 2026-11-05 12:37 UTC |
| 200.39.151.34 | ip |
39
|
1 | BR | 2026-11-05 12:36 UTC | 2026-11-05 12:36 UTC |
| 157.51.231.209 | ip |
39
|
1 | IN | 2026-11-05 12:19 UTC | 2026-11-05 12:19 UTC |
| 45.232.95.144 | ip |
39
|
1 | CL | 2026-11-05 12:11 UTC | 2026-11-05 12:11 UTC |
| 67.208.40.178 | ip |
50
|
1 | US | 2026-11-05 11:53 UTC | 2026-11-05 11:53 UTC |
Showing 1-25 of 87036 indicators