This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP exhibits signs of automated behavior, including a mobile user-agent and lack of JavaScript support. The request to an external IP and the botnet detection signal raise concerns about potential malicious intent. The infrastructure is associated with a known provider, but the behavior is atypical for legitimate traffic.
The supernet (129.222.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs accessing the same sites using similar user agents, indicating potential automation or scraping activity. The lack of forward DNS matches and the use of mobile user agents across different countries further suggest possible misuse of legitimate infrastructure.
Region: Mexico City, Mexico
City: Mexico City
Local time: 2026-06-25 09:18:02