This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
The IP exhibits characteristics of automated behavior, including a known bot user-agent and access to a site with a 403 status. The lack of JavaScript support further indicates potential bot activity. While the user-agent is structured and associated with a legitimate service, the overall context raises concerns about the intent and nature of the access.
The supernet (85.208.0.0/16), which this IP belongs to, exhibits a high level of coordinated automation, primarily driven by the SEMrushBot user agent, which is consistently used across multiple IPs. The behavior indicates a significant volume of low-interaction traffic, likely for web scraping or indexing purposes, with some instances of 403 errors suggesting potential access restrictions.
Region: Virginia, United States
City: Ashburn
Local time: 2026-06-22 10:18:34