105.186.27.68
IP Risk Score: 36 / 100
This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
What is this IP address?
South Africa (ZA)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Android (100%)
- Device Type: Mobile (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of automated behavior with multiple requests in a short time frame. However, the user-agent appears legitimate and supports JavaScript, which reduces the likelihood of malicious intent. The traffic originates from a known ISP in South Africa.
The supernet (105.186.0.0/16), which this IP belongs to, exhibits behavior indicative of potential automated scraping or bot activity, characterized by repetitive low-interaction visits and a lack of matching forward DNS records. The use of similar user agents across multiple IPs raises concerns about coordinated stealth automation, despite the legitimate RDNS entries.
JavaScript Support
✓ YesUser-Agent Samples
- Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Mobile Safari/537.36
IP Location
Region: Gauteng, South Africa
City: Johannesburg
Local time: 2026-06-22 14:26:02