This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP shows signs of potential automated activity due to the empty user-agent and lack of identifiable behavior. The absence of RDNS pointing to a known entity raises concerns about its legitimacy.
The supernet (102.141.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive, low-interaction visits, a high number of identical user agents, and a lack of legitimate DNS resolution. This suggests potential coordinated automation, likely indicative of scraping or bot activity, with a significant risk of analytics pollution.
Region: Gauteng, South Africa
City: Centurion
Local time: 2026-06-22 23:21:40