This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows signs of automated behavior with a malformed user-agent and no JavaScript support, indicating potential scraping activity. The 403 hits suggest attempts to access restricted content, raising concerns about malicious intent.
The supernet (131.72.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive, low-interaction visits across multiple IPs, with a significant overlap in user agents suggesting potential automation. The presence of DNS mismatches and a lack of legitimate bot characteristics raises concerns about coordinated scraping or analytics pollution.
Region: São Paulo, Brazil
City: São Paulo
Local time: 2026-06-24 01:19:36