This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP shows signs of automated behavior, including a lack of JavaScript support and a suspicious user-agent that may be spoofed. The access pattern is limited, but the combination of these factors raises significant concerns about potential scraping or probing activities.
The supernet (168.181.0.0/16), which this IP belongs to, exhibits signs of coordinated automation with repetitive low-interaction traffic and a variety of user agents, some of which are outdated or suspicious. The presence of multiple IPs with mismatched forward DNS and RDNS raises concerns about potential scraping or bot activity, despite some legitimate-looking infrastructure.
Region: Paraná, Brazil
City: Curitiba
Local time: 2026-06-23 11:34:37