The risk score for this supernet indicates elevated risk at the aggregated network level. Higher scores reflect stronger signals identified across related subnets.
The supernet (195.85.0.0/16) exhibits coordinated behavior with multiple IPs using similar user agents and accessing the same target URLs, indicating potential automated scraping activity. The lack of matching forward DNS and RDNS records raises concerns about the legitimacy of the traffic, suggesting possible misuse of infrastructure.
The following signals are generated automatically and do not override the overall risk score shown above.