This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows signs of botnet activity with a suspicious user-agent that lacks JavaScript support. The access pattern indicates potential probing behavior, especially with the absence of RDNS and the nature of the request.
The supernet (200.53.0.0/16), which this IP belongs to, exhibits behavior indicative of coordinated automation, with multiple IPs showing repetitive, low-interaction visits and a variety of user agents, some of which appear to be spoofed. While the RDNS and forward DNS match for most IPs, the presence of distinct user agents and low interaction raises concerns about potential scraping or bot-like activity.
Region: São Paulo, Brazil
City: São Paulo
Local time: 2026-07-05 07:06:21