This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows signs of suspicious activity, including multiple 404 responses for sensitive paths and a honeypot hit. The user-agent appears to be a mobile browser, but the behavior suggests potential automation. The IP is associated with a hosting provider, which raises further concerns about the intent behind the access.
The supernet (185.184.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive low-interaction visits, a variety of user agents that suggest potential automation, and multiple IPs showing signs of proxy usage. The presence of DNS mismatches and the lack of legitimate bot behavior indicators raise concerns about coordinated scraping or other automated activities.
Region: South Holland, The Netherlands
City: Naaldwijk
Local time: 2026-06-25 11:41:58