This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP exhibits signs of automated behavior, including a non-standard user-agent and lack of JavaScript support. The request pattern suggests potential probing activity, particularly with the botnet detection signal. The absence of RDNS further raises concerns about the legitimacy of the traffic.
The supernet (175.157.0.0/16), which this IP belongs to, exhibits behavior indicative of low-interaction, automated traffic, primarily from mobile devices, with no matching RDNS or forward DNS records. The repetitive nature of the traffic and the use of a single ASN suggest potential misuse of legitimate infrastructure, raising concerns about coordinated scraping or bot activity.
Region: Western Province, Sri Lanka
City: Colombo
Local time: 2026-06-28 07:25:07