This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
The IP shows a single access event with a malformed user-agent indicative of potential automation. The lack of JavaScript support and the nature of the access suggest possible probing behavior. The RDNS indicates a residential ISP, which adds to the suspicion.
The supernet (191.243.0.0/16), which this IP belongs to, exhibits behavior indicative of low-interaction, repetitive access patterns across multiple IPs, with a variety of user agents suggesting potential automation. However, the lack of consistent RDNS matches and the presence of unusual user agents raise concerns about possible misuse or spoofing.
Region: São Paulo, Brazil
City: São Sebastião
Local time: 2026-07-05 12:29:42