IP Risk Score: 67 / 100

This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.

Block IPs like this in your system

What is this IP address?

IP Address: 212.8.252.95

Country: The Netherlands flag

The Netherlands (NL)

Region Name: South Holland (ZH)

City: Rotterdam

ISP: WorldStream B.V.

Threat level: 67 / 100
Conf. level: 100 / 100

Properties

ASN: AS49981

AS Name: WorldStream

Timezone: Europe/Amsterdam

Reverse DNS: customer.worldstream.nl

Status: Critical

Hosting

Proxy

Observed Client Profile

OS: Android (100%)
Device Type: Mobile (100%)
Browser Family: Chrome (100%)
Rendering Engine: Gecko (100%)

Behavioral Indicators

The IP address exhibits behavior consistent with automated access, including multiple requests in a short time frame and the use of a mobile user-agent that may be spoofed. The presence of a proxy and hosting infrastructure raises concerns about the legitimacy of the traffic.

JavaScript Support

✓ Yes

User-Agent Samples

Mozilla/5.0 (Linux; Android 15; V2420 Build/AP3A.240905.015.A2; ) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/142.0.7444.171 Mobile Safari/537.36

Integrate IPIntel into your system

IP Location

Region: South Holland, The Netherlands

City: Rotterdam

Local time: 2026-06-25 12:28:05

Subnet
212.8.252.0/24
Supernet
212.8.0.0/16