This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
The IP address shows signs of suspicious activity, including a honeypot hit and access to a sensitive admin path. The absence of JavaScript support and the use of a proxy further indicate potential automated behavior. The single event from a cloud-based infrastructure raises concerns about evasion tactics.
The supernet (104.234.0.0/16), which this IP belongs to, exhibits behavior indicative of coordinated automation, with multiple IPs showing repetitive low-interaction visits and a reliance on similar user agents. The presence of proxy usage and DNS mismatches raises concerns about potential scraping or botnet activity.
Region: Illinois, United States
City: Chicago
Local time: 2026-06-25 12:21:41