This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows signs of automated behavior with a mobile user-agent that lacks JavaScript support. The request to a potentially sensitive path raises concerns, especially given the botnet detection signal. The absence of RDNS further complicates the assessment.
The supernet (170.238.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by low-interaction, repetitive visits with a mix of outdated and modern user agents. The presence of identical or crawler-like user agents across multiple IPs, combined with DNS mismatches, suggests potential automation and scraping activities, raising concerns about coordinated stealth operations.
Region: São Paulo, Brazil
City: Amparo
Local time: 2026-06-23 11:34:42