IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 103.28.36.220 ip

Score
1
/100
raw: 0.11
Reports
28
Last Reported
2026-08-05 06:57 UTC
Categories
Web Stack Probe (25) Scanning (2) API Probe (1)

Network details

ASN
131353
Organization
NhanHoa Software company
Country
VN

Threat Intelligence enriched 2026-05-13 01:50 UTC

Reverse DNS
wordpress-hosting16.nhanhoa.com

Sensor Activity last 16 events

Time (UTC) Trap Signal Method Path Flags
2026-08-05 06:56 UTC wp-json direct GET /wp-json/wp/v2/users
2026-06-24 14:49 UTC wp-json direct GET /wp-json/wp/v2/users/1
2026-06-13 05:08 UTC xmlrpc direct POST /xmlrpc.php
2026-06-12 16:27 UTC wp-json direct GET /wp-json/wc/v3/customers
2026-06-12 11:42 UTC catch-all-suspicious direct GET /author-sitemap.xml
2026-06-03 05:44 UTC wp-json direct GET /wp-json/peepso/v1/members
2026-05-30 16:03 UTC wp-json direct GET /wp-json/wp/v2/posts
2026-05-30 15:50 UTC wp-json direct GET /wp-json/wp/v2/comments
2026-05-22 01:58 UTC wp-json direct GET /wp-json/wp/v2/posts
2026-05-21 07:51 UTC wp-json direct GET /wp-json/ultimate-member/v1/users
2026-05-21 05:57 UTC catch-all-suspicious direct GET /sitemap_index.xml
2026-05-20 16:58 UTC wp-json direct GET /wp-json/lp/v1/users
2026-05-19 16:05 UTC wp-json direct GET /wp-json/ldlms/v2/users
2026-05-15 07:09 UTC wp-json direct GET /wp-json/learnpress/v1/users
2026-05-14 22:44 UTC wp-json direct GET /wp-json/webmention/1.0
2026-05-14 15:27 UTC wp-json direct GET /wp-json/mepr/v1/members

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
181.118.37.37 ip
50
 1 TT 2026-11-02 22:00 UTC 2026-11-02 22:00 UTC
45.182.60.34 ip
50
 1 BR 2026-11-02 22:00 UTC 2026-11-02 22:00 UTC
190.4.127.80 ip
39
 1 AR 2026-11-02 21:59 UTC 2026-11-02 21:59 UTC
179.1.199.154 ip
50
 1 CO 2026-11-02 21:59 UTC 2026-11-02 21:59 UTC
174.138.190.126 ip
55
 1 US 2026-11-02 21:59 UTC 2026-11-02 21:59 UTC
37.114.149.27 ip
50
 1 AZ 2026-11-02 21:57 UTC 2026-11-02 21:57 UTC
210.195.165.73 ip
39
 1 MY 2026-11-02 21:57 UTC 2026-11-02 21:57 UTC
189.217.20.215 ip
39
 1 MX 2026-11-02 21:57 UTC 2026-11-02 21:57 UTC
190.60.46.246 ip
39
 1 CO 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
37.18.25.111 ip
50
 1 RU 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
181.23.23.250 ip
50
 1 AR 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
177.245.215.116 ip
39
 1 MX 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
102.178.175.34 ip
50
 1 BF 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
197.221.126.20 ip
39
 1 ZA 2026-11-02 21:56 UTC 2026-11-02 21:56 UTC
87.196.97.70 ip
50
 1 PT 2026-11-02 21:55 UTC 2026-11-02 21:55 UTC
88.168.236.106 ip
39
 1 FR 2026-11-02 21:54 UTC 2026-11-02 21:54 UTC
181.118.35.123 ip
39
 1 TT 2026-11-02 21:54 UTC 2026-11-02 21:54 UTC
189.171.218.221 ip
50
 1 MX 2026-11-02 21:54 UTC 2026-11-02 21:54 UTC
45.238.251.112 ip
50
 1 AR 2026-11-02 21:53 UTC 2026-11-02 21:53 UTC
179.60.143.153 ip
50
 1 BR 2026-11-02 21:51 UTC 2026-11-02 21:51 UTC
186.130.48.33 ip
39
 1 AR 2026-11-02 21:51 UTC 2026-11-02 21:51 UTC
178.210.226.177 ip
39
 1 IQ 2026-11-02 21:51 UTC 2026-11-02 21:51 UTC
187.190.184.108 ip
50
 1 MX 2026-11-02 21:50 UTC 2026-11-02 21:50 UTC
117.176.126.138 ip
50
 1 CN 2026-11-02 21:49 UTC 2026-11-02 21:49 UTC
179.51.111.187 ip
39
 1 CO 2026-11-02 21:49 UTC 2026-11-02 21:49 UTC

Showing 1-25 of 84877 indicators