This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP address exhibits suspicious behavior with repeated access to admin paths resulting in 403 responses, indicating potential probing or scraping activity. The absence of RDNS and the use of a cloud hosting provider further raise concerns about the legitimacy of the traffic.
The supernet (45.149.0.0/16), which this IP belongs to, exhibits coordinated behavior characterized by repetitive, low-interaction requests to specific endpoints, primarily targeting 'wlwmanifest.xml' files across multiple IPs. The use of identical user agents and the presence of proxy hosting suggests possible automation for scraping or data collection, raising concerns about potential misuse.
Region: California, United States
City: Los Angeles
Local time: 2026-06-25 05:59:44