This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
The IP shows signs of potential automation with a mobile user-agent and lack of JavaScript support. While the access appears to be legitimate, the combination of these factors raises some concerns about the nature of the activity.
The supernet (102.249.0.0/16), which this IP belongs to, exhibits behavior indicative of low-interaction, automated browsing with a mix of legitimate and potentially suspicious activity. Multiple IPs utilize similar user agents and exhibit consistent DNS resolution, suggesting possible coordinated scraping or bot activity, but the presence of legitimate DNS matches and varied user agents mitigates the threat level.
Region: KwaZulu-Natal, South Africa
City: Durban
Local time: 2026-06-22 16:18:17