The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (103.109.0.0/16) exhibits suspicious behavior characterized by repetitive, low-interaction visits to a specific domain, with multiple IPs using similar user agents. The lack of RDNS and forward DNS matches, combined with the use of outdated user agents, suggests potential automation or scraping activities.
The following signals are generated automatically and do not override the overall risk score shown above.