Identicon of IP address 185.101.252.205

185.101.252.205

IP Risk Score: 71 / 100

This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.

What is this IP address?
IP Address: 185.101.252.205
Country: Netherlands flag Netherlands (NL)
Region Name: North Holland (NH)
City: Amsterdam
ISP: LeaseWeb Netherlands B.V.
Organization: Private Customer
Threat level: 71 / 100
Conf. level: 100 / 100
Properties
ASN: AS60781
AS Name: LeaseWeb Netherlands B.V.
Timezone: Europe/Amsterdam
Status: Critical
Hosting
Proxy

Observed Client Profile
  • OS: Windows (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP exhibits signs of potential automated behavior, including multiple requests in a short time frame and usage of a proxy hosting service. The user-agent appears legitimate but is associated with a cloud provider, raising concerns about the nature of the traffic.

The supernet (185.101.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive, low-interaction visits, a variety of user agents, and a significant number of requests to specific endpoints, suggesting potential automated scraping or scanning activities. The presence of multiple IPs with proxy characteristics and DNS mismatches further indicates possible coordinated automation efforts.

JavaScript Support
โœ“ Yes
User-Agent Samples
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0

IP Location

Region: North Holland, Netherlands

City: Amsterdam

Local time: 2026-06-24 19:31:49