213.232.121.194
IP Risk Score: 91 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Firefox (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP exhibits suspicious behavior with no JavaScript support and is associated with a proxy. The user-agent appears to be a standard browser but may be spoofed. The activity includes a POST request to an API endpoint, which raises concerns about potential scraping or automated interaction.
The supernet (213.232.0.0/16), which this IP belongs to, exhibits highly coordinated behavior indicative of automated scraping attempts, primarily targeting a specific site with repeated login attempts and low interaction page visits. The use of identical user agents across multiple IPs, combined with a high number of honeypot hits, suggests a malicious intent to exploit vulnerabilities, despite some legitimate infrastructure indicators.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:114.0) Gecko/20100101 Firefox/114.0
IP Location
Region: New York, United States
City: New York
Local time: 2026-07-05 05:08:31