This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows suspicious behavior with multiple access attempts to admin paths, including a login page, and has recorded honeypot hits. The absence of JavaScript support further indicates potential bot activity. The use of a proxy and the nature of the requests suggest malicious intent.
The supernet (213.232.0.0/16), which this IP belongs to, exhibits highly coordinated behavior indicative of automated scraping attempts, primarily targeting a specific site with repeated login attempts and low interaction page visits. The use of identical user agents across multiple IPs, combined with a high number of honeypot hits, suggests a malicious intent to exploit vulnerabilities, despite some legitimate infrastructure indicators.
Region: Uusimaa, Finland
City: Helsinki
Local time: 2026-07-05 13:08:30