This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
The IP exhibits signs of potential automated behavior, including a lack of JavaScript support and a mobile user-agent that may be spoofed. The absence of RDNS and the single access event raise concerns about possible probing or evasion tactics.
The supernet (149.19.0.0/16), which this IP belongs to, exhibits signs of coordinated automation with multiple IPs showing repetitive access patterns to various sites, often using identical user agents. The presence of hosting and proxy services, along with DNS mismatches, raises concerns about potential scraping or botnet activity.
Region: São Paulo, Brazil
City: Sao Paulo
Local time: 2026-06-25 17:39:27