138.199.39.136
IP Risk Score: 43 / 100
This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
What is this IP address?
Japan (JP)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (50%)
- Device Type: Desktop (50%)
- Browser Family: Chrome (50%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of potential automation with multiple user-agents and access to a single site. The lack of JavaScript support and the hosting infrastructure raise concerns about the nature of the traffic. However, the overall activity is low and does not indicate overt malicious intent.
The supernet (138.199.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive, low-interaction visits across multiple IPs, with a high incidence of 403 and honeypot hits. The use of identical user agents and a lack of forward DNS matches suggest potential automated scraping or bot activity, raising concerns about coordinated stealth automation and analytics pollution.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
- Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Mobile/15E148 Safari/603.1.30
IP Location
Region: Tokyo, Japan
City: Tokyo
Local time: 2026-06-23 01:08:37