Identicon of IP address 102.249.7.52

102.249.7.52

IP Risk Score: 35 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

What is this IP address?
IP Address: 102.249.7.52
Country: South Africa flag South Africa (ZA)
Region Name: KwaZulu-Natal (KZN)
City: Durban
ISP: Telkom SA Ltd.
Organization: Telkom SA Limited
Threat level: 35 / 100
Conf. level: 100 / 100
Properties
ASN: AS5713
AS Name: Telkom SA Ltd.
Timezone: Africa/Johannesburg
Reverse DNS: 8ta-249-7-52.telkomadsl.co.za
Status: Suspicious

Observed Client Profile
  • OS: Android (100%)
  • Device Type: Mobile (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP shows signs of potential automation with a mobile user-agent and lack of JavaScript support. While the access appears to be legitimate, the combination of these factors raises some concerns about the nature of the activity.

The supernet (102.249.0.0/16), which this IP belongs to, exhibits behavior indicative of low-interaction, automated browsing with a mix of legitimate and potentially suspicious activity. Multiple IPs utilize similar user agents and exhibit consistent DNS resolution, suggesting possible coordinated scraping or bot activity, but the presence of legitimate DNS matches and varied user agents mitigates the threat level.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Linux; Android 12; CTR-L81; HMSCore 6.15.0.332; GMSCore 0.3.9.250932) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.5735.196 HuaweiBrowser/15.0.10.302 Mobile Safari/537.36

IP Location

Region: KwaZulu-Natal, South Africa

City: Durban

Local time: 2026-06-22 16:18:17