Identicon of IP address 104.218.147.202

104.218.147.202

IP Risk Score: 63 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

What is this IP address?
IP Address: 104.218.147.202
Country: United States flag United States (US)
Region Name: Indiana (IN)
City: Warsaw
ISP: Metronet
Organization: Metronet
Threat level: 63 / 100
Conf. level: 100 / 100
Properties
ASN: AS30600
AS Name: Metronet
Timezone: America/Indiana/Indianapolis
Status: Suspicious

Observed Client Profile
  • OS: Windows (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP has made a single request resulting in a 403 error, indicating potential probing behavior. The user-agent appears to be a standard browser but lacks JavaScript support, which is unusual for legitimate users. The absence of RDNS further raises concerns about the authenticity of the request.

The supernet (104.218.0.0/16), which this IP belongs to, shows signs of coordinated automation with multiple IPs exhibiting low-interaction, repetitive access patterns to similar sites, often using identical or outdated user agents. The lack of matching forward DNS and RDNS records raises suspicions about the legitimacy of the traffic, indicating potential scraping or bot activity.

๐Ÿšท
Blocked Paths
JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36

IP Location

Region: Indiana, United States

City: Warsaw

Local time: 2026-06-28 01:48:22