This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP shows signs of potential automated activity, including access from a hosting provider with no RDNS. The user-agent appears structured but lacks JavaScript support, which raises concerns about its authenticity. The single event recorded may indicate probing behavior.
The supernet (185.12.0.0/16), which this IP belongs to, exhibits behavior indicative of coordinated automation, with multiple IPs performing repetitive, low-interaction visits to the same sites, primarily using a limited set of user agents. The lack of DNS resolution consistency and the presence of hosting and proxy services suggest potential misuse of legitimate infrastructure for scraping or other automated activities.
Region: Stockholm County, Sweden
City: Stockholm
District: Norrmalm
Local time: 2026-06-22 17:04:19