Identicon of IP address 204.217.161.130

204.217.161.130

IP Risk Score: 91 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 204.217.161.130
Country: Germany flag Germany (DE)
Region Name: Hesse (HE)
City: Frankfurt am Main
ISP: Cogent Communications
Organization: Aventice LLC
Threat level: 91 / 100
Conf. level: 100 / 100
Properties
ASN: AS28753
AS Name: Leaseweb Deutschland GmbH
Timezone: Europe/Berlin
Status: Critical
Hosting
Proxy

Observed Client Profile
  • OS: Windows (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP address exhibits strong indicators of automated behavior, including lack of JavaScript support and use of a common browser user-agent that may be spoofed. It originates from a hosting provider and is associated with proxy services, raising concerns about potential scraping or probing activities.

The supernet (204.217.0.0/16), which this IP belongs to, exhibits signs of coordinated automation, with multiple IPs utilizing similar user agents and accessing the same URLs, suggesting a scraping operation. The lack of forward DNS matches and high proxy usage raises concerns about the legitimacy of the traffic.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36

IP Location

Region: Hesse, Germany

City: Frankfurt am Main

Local time: 2026-06-25 23:23:34