103.249.38.31
IP Risk Score: 64 / 100
This IP presents a moderate risk and may be associated with automated activity. Moderate behavioral signals suggest possible automated probing or scanning. This assessment is backed by strong and consistent detection signals. The combined signals place this IP in a moderate risk category. Monitoring is recommended, with defensive action considered if activity continues.
What is this IP address?
India (IN)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Firefox (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of potential automated activity, including a malformed user-agent and a lack of JavaScript support. The access to a sensitive endpoint resulted in a 404 error, which raises concerns about probing behavior. The absence of RDNS further adds to the suspicion.
The supernet (103.249.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive low-interaction visits, a variety of user agents that suggest automation, and multiple honeypot hits indicating potential scraping or malicious activity. The lack of matching forward DNS records raises concerns about the legitimacy of the traffic.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 6.2; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/81.0.0.0 Safari/537.36
IP Location
Region: West Bengal, India
City: Kolkata
Local time: 2026-06-27 11:10:02