Identicon of IP address 130.180.238.195

130.180.238.195

IP Risk Score: 66 / 100

This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.

What is this IP address?
IP Address: 130.180.238.195
Country: United States flag United States (US)
Region Name: District of Columbia (DC)
City: Washington
ISP: RCN
Threat level: 66 / 100
Conf. level: 100 / 100
Properties
ASN: AS6079
AS Name: RCN
Timezone: America/New_York
Status: Suspicious

Observed Client Profile
  • OS: Windows (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP shows signs of potential automated behavior, including repeated access to a contact page resulting in a 404 error. The lack of JavaScript support raises concerns about the authenticity of the user-agent, which appears to be a common desktop browser. The absence of RDNS further complicates the assessment, suggesting possible evasion tactics.

The supernet (130.180.0.0/16), which this IP belongs to, exhibits highly repetitive behavior with low interaction, characterized by multiple IPs making one-page visits with a lack of RDNS and forward DNS matches. This suggests potential automated scraping or bot activity, particularly given the absence of legitimate user agent diversity and the consistent use of non-matching DNS records.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3

IP Location

Region: District of Columbia, United States

City: Washington

Local time: 2026-06-25 18:23:18