Identicon of IP address 204.217.161.231

204.217.161.231

IP Risk Score: 89 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

What is this IP address?
IP Address: 204.217.161.231
Country: Germany flag Germany (DE)
Region Name: Hesse (HE)
City: Frankfurt am Main
ISP: Cogent Communications
Organization: Aventice LLC
Threat level: 89 / 100
Conf. level: 100 / 100
Properties
ASN: AS28753
AS Name: Leaseweb Deutschland GmbH
Timezone: Europe/Berlin
Status: Critical
Hosting
Proxy

Observed Client Profile
  • OS: macOS (100%)
  • Device Type: Desktop (100%)
  • Browser Family: Chrome (100%)
  • Rendering Engine: Gecko (100%)
Behavioral Indicators

The IP address exhibits strong indicators of automated behavior, including missing JavaScript support and access from a known hosting provider. The user-agent appears to be spoofed, suggesting potential evasion tactics. Overall, the activity raises significant concerns about malicious intent.

The supernet (204.217.0.0/16), which this IP belongs to, exhibits signs of coordinated automation, with multiple IPs utilizing similar user agents and accessing the same URLs, suggesting a scraping operation. The lack of forward DNS matches and high proxy usage raises concerns about the legitimacy of the traffic.

JavaScript Support
โš ๏ธ No
User-Agent Samples
  • Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36

IP Location

Region: Hesse, Germany

City: Frankfurt am Main

Local time: 2026-06-25 23:23:39