The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (104.238.0.0/16) exhibits behavior indicative of coordinated automation, with multiple IPs utilizing similar user agents and engaging in repetitive, low-interaction requests to the same target. The presence of proxies and hosting services, along with mismatched forward DNS, raises concerns about potential scraping or botnet activity.
The following signals are generated automatically and do not override the overall risk score shown above.