This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP address exhibits highly suspicious behavior with a significant number of honeypot hits and repeated access attempts to various sensitive paths, indicating potential malicious intent. The use of a known automation user-agent further supports this assessment.
The supernet (13.221.0.0/16), which this IP belongs to, exhibits behavior indicative of automated scraping and potential misuse of legitimate infrastructure, with multiple IPs showing repetitive low-value interactions and a mix of legitimate and suspicious user agents. The presence of honeypot hits and high-frequency 404 responses suggests coordinated activity that may be aimed at analytics pollution.
Region: Virginia, United States
City: Ashburn
Local time: 2026-06-22 03:36:23