The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (109.196.0.0/16) exhibits suspicious behavior characterized by repetitive, low-interaction visits and a high number of honeypot hits, indicating potential automated scraping or bot activity. The presence of multiple IPs using similar user agents and the lack of legitimate RDNS matching further suggest coordinated stealth automation.
The following signals are generated automatically and do not override the overall risk score shown above.