The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (185.97.0.0/16) exhibits coordinated behavior with multiple IPs utilizing identical user agents and engaging in repetitive, low-interaction visits to a specific site, suggesting potential scraping or automated activity. The lack of legitimate RDNS and forward DNS matches raises concerns about the authenticity of the traffic, indicating possible misuse of infrastructure.
The following signals are generated automatically and do not override the overall risk score shown above.