Identicon of IP address 195.40.121.104

195.40.121.104

IP Risk Score: 84 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 195.40.121.104
Country: Japan flag Japan (JP)
Region Name: Tokyo (13)
City: Tokyo
ISP: Leaseweb Japan K.K.
Organization: Code200 UAB
Threat level: 84 / 100
Conf. level: 100 / 100
Properties
ASN: AS134351
AS Name: Leaseweb Japan K.K.
Timezone: Asia/Tokyo
Status: Critical
Proxy

Observed Client Profile
  • OS: macOS (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP address exhibits suspicious behavior, including the use of a known proxy and lack of JavaScript support, indicating potential automated activity. The user-agent appears structured but may be spoofed, and the absence of RDNS raises further concerns about its legitimacy.

The supernet (195.40.0.0/16), which this IP belongs to, exhibits coordinated behavior characterized by repetitive, low-interaction visits to a specific domain, with multiple IPs using similar user agents. The presence of proxies and mismatched forward DNS raises suspicions of automated scraping or bot activity, indicating potential misuse of legitimate infrastructure.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36

IP Location

Region: Tokyo, Japan

City: Tokyo

Local time: 2026-06-27 14:40:08