141.98.252.214
IP Risk Score: 100 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United Kingdom (GB)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (50%)
- Device Type: Desktop (100%)
- Browser Family: Unknown (100%)
- Rendering Engine: Unknown (100%)
Behavioral Indicators
The IP address has exhibited suspicious behavior, including multiple hits to a single site with POST requests and no JavaScript support, indicating potential automated scraping activity. Additionally, the presence of honeypot hits further suggests malicious intent. The IP is associated with a hosting provider and lacks reverse DNS, raising further concerns about its legitimacy.
The supernet (141.98.0.0/16), which this IP belongs to, exhibits signs of coordinated automation with multiple IPs showing repetitive, low-interaction requests to the same domain, often using similar user agents. The lack of forward DNS matches and the presence of proxy IPs suggest potential misuse of legitimate infrastructure, indicating a moderate threat level.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64)
- InternalSiteScanner/1.0
IP Location
Region: England, United Kingdom
City: Whitechapel
Local time: 2026-06-22 07:30:39