167.58.9.42
IP Risk Score: 100 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
Uruguay (UY)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP address has exhibited highly suspicious behavior, including multiple hits to admin paths and numerous honeypot interactions, indicating potential malicious intent. The access patterns suggest automated attempts to exploit vulnerabilities, particularly with repeated POST requests to sensitive endpoints.
The supernet (167.58.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by a significant number of low-interaction visits, particularly from one IP that shows signs of credential stuffing attempts on admin pages. The presence of repeated user agents and a lack of legitimate interaction patterns across multiple IPs suggests potential automation and scraping activities.
JavaScript Support
✓ YesUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
IP Location
Region: Montevideo Department, Uruguay
City: Montevideo
Local time: 2026-06-22 05:16:56