IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 209.42.28.133 ip
Score
10
/100
raw: 1.04
Reports
11
Last Reported
2026-09-03 16:14 UTC
Categories
Web Stack Probe (9)
Credential Stuffing (1)
Scanning (1)
Network details
ASN
199404
Organization
WHG Hosting Services Ltd
Country
GB
Threat Intelligence enriched 2026-11-05 00:12 UTC
Reverse DNS
s3507.bom1.stableserver.net
DNSBL Status
Clean
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-09-03 16:13 UTC | catch-all-suspicious | direct | GET | /author-sitemap.xml | |
| 2026-09-03 10:42 UTC | wp-json | direct | GET | /wp-json/oembed/1.0/embed | |
| 2026-09-03 10:02 UTC | wp-json | direct | GET | /wp-json/buddyboss/v1/members | |
| 2026-09-01 14:13 UTC | wp-json | direct | GET | /wp-json/rankmath/v1/getHead | |
| 2026-08-29 04:45 UTC | wp-json | direct | GET | /wp-json/buddypress/v1/members | |
| 2026-08-28 10:02 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-08-26 13:10 UTC | wp-json | direct | GET | /wp-json/wp/v2/media | |
| 2026-08-26 12:33 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-06-27 00:45 UTC | wp-login | direct | POST | /wp-login.php | creds |
| 2026-06-27 00:45 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-25 22:24 UTC | wp-json | direct | GET | /wp-json/oembed/1.0/embed |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 102.206.97.32 | ip |
50
|
1 | KE | 2026-11-11 10:03 UTC | 2026-11-11 10:03 UTC |
| 161.142.137.158 | ip |
39
|
1 | MY | 2026-11-11 10:02 UTC | 2026-11-11 10:02 UTC |
| 103.182.212.44 | ip |
39
|
1 | BD | 2026-11-11 10:02 UTC | 2026-11-11 10:02 UTC |
| 213.230.93.201 | ip |
50
|
1 | UZ | 2026-11-11 10:02 UTC | 2026-11-11 10:02 UTC |
| 37.66.53.198 | ip |
50
|
1 | FR | 2026-11-11 10:01 UTC | 2026-11-11 10:01 UTC |
| 87.220.135.181 | ip |
39
|
1 | ES | 2026-11-11 10:01 UTC | 2026-11-11 10:01 UTC |
| 201.153.77.95 | ip |
39
|
1 | MX | 2026-11-11 10:00 UTC | 2026-11-11 10:00 UTC |
| 103.103.32.26 | ip |
39
|
1 | BD | 2026-11-11 10:00 UTC | 2026-11-11 10:00 UTC |
| 192.223.104.87 | ip |
50
|
1 | BO | 2026-11-11 10:00 UTC | 2026-11-11 10:00 UTC |
| 190.97.102.41 | ip |
39
|
1 | GY | 2026-11-11 10:00 UTC | 2026-11-11 10:00 UTC |
| 177.241.163.108 | ip |
50
|
1 | MX | 2026-11-11 09:59 UTC | 2026-11-11 09:59 UTC |
| 213.204.70.241 | ip |
39
|
1 | LB | 2026-11-11 09:59 UTC | 2026-11-11 09:59 UTC |
| 136.158.26.89 | ip |
50
|
1 | PH | 2026-11-11 09:59 UTC | 2026-11-11 09:59 UTC |
| 102.129.75.133 | ip |
39
|
1 | CG | 2026-11-11 09:58 UTC | 2026-11-11 09:58 UTC |
| 88.135.62.47 | ip |
50
|
1 | RU | 2026-11-11 09:58 UTC | 2026-11-11 09:58 UTC |
| 71.104.54.121 | ip |
39
|
1 | US | 2026-11-11 09:57 UTC | 2026-11-11 09:57 UTC |
| 118.68.29.215 | ip |
39
|
1 | VN | 2026-11-11 09:57 UTC | 2026-11-11 09:57 UTC |
| 45.195.48.18 | ip |
39
|
1 | PH | 2026-11-11 09:57 UTC | 2026-11-11 09:57 UTC |
| 89.92.237.226 | ip |
39
|
1 | FR | 2026-11-11 09:57 UTC | 2026-11-11 09:57 UTC |
| 103.108.90.57 | ip |
39
|
1 | BD | 2026-11-11 09:56 UTC | 2026-11-11 09:56 UTC |
| 91.214.139.114 | ip |
50
|
1 | UA | 2026-11-11 09:56 UTC | 2026-11-11 09:56 UTC |
| 185.146.115.155 | ip |
50
|
1 | AZ | 2026-11-11 09:55 UTC | 2026-11-11 09:55 UTC |
| 103.76.46.162 | ip |
39
|
1 | BD | 2026-11-11 09:55 UTC | 2026-11-11 09:55 UTC |
| 120.230.9.135 | ip |
39
|
1 | CN | 2026-11-11 09:55 UTC | 2026-11-11 09:55 UTC |
| 163.128.41.12 | ip |
39
|
1 | PH | 2026-11-11 09:54 UTC | 2026-11-11 09:54 UTC |
Showing 1-25 of 93241 indicators