This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
The IP shows signs of potential automation with a malformed user-agent and lack of JavaScript support. It originates from a known cloud provider, which raises concerns about its intent. However, the low volume of access and the structured user-agent suggest it may not be malicious.
The supernet (129.222.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs accessing the same sites using similar user agents, indicating potential automation or scraping activity. The lack of forward DNS matches and the use of mobile user agents across different countries further suggest possible misuse of legitimate infrastructure.
Region: Arizona, United States
City: Phoenix
Local time: 2026-06-25 08:18:00