The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (13.221.0.0/16) exhibits behavior indicative of automated scraping and potential misuse of legitimate infrastructure, with multiple IPs showing repetitive low-value interactions and a mix of legitimate and suspicious user agents. The presence of honeypot hits and high-frequency 404 responses suggests coordinated activity that may be aimed at analytics pollution.
The following signals are generated automatically and do not override the overall risk score shown above.