This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP has exhibited suspicious behavior with multiple access attempts to admin paths, including a POST request to the login page. The presence of honeypot hits and lack of JavaScript support further indicate potential malicious intent. The user-agent appears structured but may be spoofed.
The supernet (122.8.0.0/16), which this IP belongs to, exhibits a pattern of repetitive, low-interaction traffic with multiple IPs utilizing similar user agents, indicating potential automated scraping behavior. The lack of forward DNS matches and the use of identical user agents across different IPs raises concerns about coordinated stealth automation and analytics pollution.
Region: Stockholm County, Sweden
City: Stockholm
Local time: 2026-06-23 12:27:14