This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows aggressive behavior with multiple access attempts to admin paths, including successful POST requests with login attempts. The high number of honeypot hits indicates malicious intent. The traffic originates from a known hosting provider, further raising suspicion.
The supernet (149.102.0.0/16), which this IP belongs to, exhibits highly coordinated behavior indicative of automated scraping, with multiple IPs showing repetitive access patterns to specific sites, low interaction, and a prevalence of non-human user agents. The presence of honeypot hits and failed requests further suggests an intent to probe or scrape content, raising concerns about potential misuse of legitimate infrastructure.
Region: Kyiv City, Ukraine
City: Kyiv
Local time: 2026-07-05 13:22:19