This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP shows a single access event with a malformed user-agent indicative of potential automation. The lack of RDNS and absence of JavaScript support raise concerns about the legitimacy of the request. The behavior suggests possible probing activity.
The supernet (131.100.0.0/16), which this IP belongs to, exhibits signs of coordinated automation with repetitive low-interaction visits and a variety of user agents, some of which mimic legitimate browsers. However, the presence of DNS mismatches and the lack of consistent legitimate behavior across the IPs suggest potential misuse or scraping activity.
Region: São Paulo, Brazil
City: São Paulo
Local time: 2026-06-24 04:25:13