This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows signs of automated behavior with a malformed user-agent and no JavaScript support, indicating potential bot activity. The access pattern is suspicious, particularly given the botnet detection signal.
The supernet (152.249.0.0/16), which this IP belongs to, exhibits signs of coordinated low-interaction behavior with repetitive one-page visits and a lack of legitimate user agent diversity. The use of identical RDNS entries and non-matching forward DNS raises suspicions of automated scraping or bot activity, though the absence of significant threat detection indicators suggests a lower immediate risk.
Region: São Paulo, Brazil
City: Guarujá
Local time: 2026-06-23 07:06:39