This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP exhibits suspicious behavior consistent with automated scanning, including multiple requests for sensitive files and admin paths, resulting in numerous 403 and 404 responses. The use of a known automation user-agent and proxy infrastructure further indicates potential malicious intent.
The supernet (213.232.0.0/16), which this IP belongs to, exhibits highly coordinated behavior indicative of automated scraping attempts, primarily targeting a specific site with repeated login attempts and low interaction page visits. The use of identical user agents across multiple IPs, combined with a high number of honeypot hits, suggests a malicious intent to exploit vulnerabilities, despite some legitimate infrastructure indicators.
Region: North Holland, The Netherlands
City: Amsterdam
Local time: 2026-06-29 12:50:19