Identicon of IP address 104.164.126.128

104.164.126.128

IP Risk Score: 64 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

What is this IP address?
IP Address: 104.164.126.128
Country: United States flag United States (US)
Region Name: California (CA)
City: Santa Clara
ISP: EGIHosting
Organization: EGIHosting
Threat level: 64 / 100
Conf. level: 100 / 100
Properties
ASN: AS18779
AS Name: EGIHosting
Timezone: America/Los_Angeles
Status: Suspicious
Hosting

Observed Client Profile
  • OS: Windows (50%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Variability
Behavioral Indicators

The IP shows signs of potential automated activity with multiple requests in a short time frame. The lack of JavaScript support and the use of hosting infrastructure raise concerns about the legitimacy of the traffic. The user-agents, while structured, are common and could be spoofed.

The supernet (104.164.0.0/16), which this IP belongs to, exhibits coordinated behavior characterized by repetitive, low-interaction visits to specific sites, primarily using identical user agents across multiple IPs. This suggests the presence of automated scraping or bot activity, particularly given the high number of honeypot hits and the lack of legitimate user interaction.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36
  • Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36

IP Location

Region: California, United States

City: Santa Clara

Local time: 2026-06-23 21:01:30