45.140.206.197
IP Risk Score: 87 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Linux (100%)
- Device Type: Desktop (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP address shows suspicious behavior with multiple access attempts to admin paths, including a login attempt with valid credentials. The presence of honeypot hits and lack of JavaScript support further indicate potential malicious intent. The traffic originates from a known hosting provider, which raises additional concerns about automation.
The supernet (45.140.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs using the same user agent 'Anthill' to access the same target website with repetitive, low-interaction requests. The lack of forward DNS matches and the use of hosting and proxy services suggest potential automation for scraping or other non-human activities.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36
IP Location
Region: New York, United States
City: New York
Local time: 2026-07-05 10:08:36