Identicon of IP address 170.239.9.20

170.239.9.20

IP Risk Score: 63 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

What is this IP address?
IP Address: 170.239.9.20
Country: Brazil flag Brazil (BR)
Region Name: São Paulo (SP)
City: Olímpia
ISP: Turbonet Telecom Ltda
Organization: Turbonet Telecom Ltda
Threat level: 63 / 100
Conf. level: 100 / 100
Properties
ASN: AS61942
AS Name: TURBONET TELECOM LTDA
Timezone: America/Sao_Paulo
Reverse DNS: 170-239-9-20.turbonettelecom.com.br
Status: Suspicious

Observed Client Profile
  • OS: Android (100%)
  • Device Type: Mobile (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP shows signs of potential automated activity, including a botnet detection signal and lack of JavaScript support. The user-agent appears to be a mobile device, which can be easily spoofed. The single access event raises concerns about the intent behind the request.

The supernet (170.239.0.0/16), which this IP belongs to, exhibits low-interaction, repetitive behavior with multiple IPs accessing similar sites using distinct user agents, suggesting potential automated scraping or bot activity. The lack of matching forward DNS records for most IPs raises concerns about legitimacy, while the presence of a single IP with matching forward DNS adds some ambiguity.

🕸️
Botnet Node
JavaScript Support
⚠️ No
User-Agent Samples
  • Mozilla/5.0 (Linux; Android 5.0; SM-G900P Build/LRX21T) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/47.0.8227.1235 Mobile Safari/537.36

IP Location

Region: São Paulo, Brazil

City: Olímpia

Local time: 2026-06-22 19:11:34