This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP shows signs of botnet activity with a suspicious user-agent and no JavaScript support. The access pattern indicates potential automated probing behavior, particularly targeting an external IP. The RDNS does not point to a known cloud provider, but the overall context raises significant concerns.
The supernet (103.154.0.0/16), which this IP belongs to, exhibits coordinated behavior characterized by repetitive, low-interaction visits to a specific domain, with multiple IPs using similar user agents. The lack of forward DNS matches and the presence of crawler-like user agents across different IPs suggest potential automation and scraping activities, raising concerns about analytics pollution and possible misuse of legitimate infrastructure.
Region: Jakarta, Indonesia
City: Jakarta
Local time: 2026-06-28 13:48:18