This IP is considered low risk and is not actively malicious. It shows occasional automated or non-human access patterns. This assessment is backed by strong and consistent detection signals. Overall risk is low based on the observed behavior. No action is needed unless this activity becomes persistent.
The IP address shows signs of potential automation due to the lack of JavaScript support and a mobile user-agent that may be spoofed. However, the access appears to be singular and from a known ISP, which reduces the risk level.
The supernet (105.224.0.0/16), which this IP belongs to, exhibits signs of coordinated automation with repetitive, low-interaction traffic patterns across multiple IPs, utilizing similar user agents. The lack of forward DNS matches and the presence of crawler-like behavior suggest potential scraping or bot activity, raising concerns about analytics pollution.
Region: Gauteng, South Africa
City: Johannesburg
Local time: 2026-06-22 16:18:41