IP Risk Score: 60 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

Detect suspicious IPs early

What is this IP address?

IP Address: 131.196.79.18

Country: Brazil flag

Brazil (BR)

Region Name: São Paulo (SP)

City: São José do Rio Pardo

ISP: Conexao - Telecom. E Internet Ltda

Organization: Videomar Rede Nordeste S/A

Threat level: 60 / 100
Conf. level: 100 / 100

Properties

ASN: AS262509

AS Name: CONEXAO - TELECOM. E INTERNET LTDA

Timezone: America/Sao_Paulo

Status: Suspicious

Observed Client Profile

OS: macOS (100%)
Device Type: Desktop (100%)
Browser Family: Chrome (100%)
Rendering Engine: Gecko (100%)

Behavioral Indicators

The IP shows signs of potential automated behavior, including a lack of JavaScript support and a structured user-agent that may be spoofed. The access pattern is limited, but the absence of RDNS raises concerns about the legitimacy of the traffic.

The supernet (131.196.0.0/16), which this IP belongs to, exhibits signs of coordinated low-interaction behavior with repetitive visits to a limited number of pages across multiple IPs, suggesting potential automation. The use of diverse user agents and DNS mismatches raises concerns about the legitimacy of the traffic, indicating possible scraping or bot activity.

JavaScript Support

⚠️ No

User-Agent Samples

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36

Integrate IPIntel into your system

IP Location

Region: São Paulo, Brazil

City: São José do Rio Pardo

Local time: 2026-07-04 20:23:52

Subnet
131.196.79.0/24
Supernet
131.196.0.0/16