This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP shows signs of automated behavior with repeated access to a specific resource resulting in 404 responses. The user-agent is non-standard and lacks JavaScript support, indicating potential scraping activity. The absence of RDNS and the use of a proxy further raise concerns about the legitimacy of the traffic.
The supernet (196.251.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive low-interaction visits, a mix of automated and human-like user agents, and a significant number of requests targeting sensitive endpoints. The presence of multiple IPs using identical or similar user agents, along with a high frequency of 404 responses, suggests potential scraping or scanning activities, indicating a coordinated effort that could be malicious.
Region: Provence-Alpes-Côte d'Azur, France
City: Marseille
Local time: 2026-06-25 23:23:27