This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
The IP shows a single access event with a malformed user-agent and no reverse DNS, indicating potential automation or evasion. The lack of JavaScript support further raises concerns about the legitimacy of the access.
The supernet (185.106.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs accessing the same site using a mix of outdated and modern user agents, suggesting potential automation. However, the lack of honeypot hits and the presence of legitimate ISP information indicate that the activity may not be malicious but rather indicative of automated scraping or bot behavior.
Region: Erbil, Iraq
City: Erbil
Local time: 2026-07-04 00:43:18