103.81.215.206
IP Risk Score: 33 / 100
This IP is considered low risk and is not actively malicious. It shows occasional automated or non-human access patterns. This assessment is backed by strong and consistent detection signals. Overall risk is low based on the observed behavior. No action is needed unless this activity becomes persistent.
What is this IP address?
India (IN)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of potentially automated behavior with a POST request to a known endpoint resulting in a 404 error. The user-agent appears to be a standard browser but is being used in a context that raises questions about intent. The lack of RDNS consistency and the mobile user-agent further contribute to the uncertainty.
The supernet (103.81.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs utilizing similar user agents and engaging in repetitive, low-interaction visits to the same domain, suggesting potential automation or scraping activities. The lack of matching forward DNS records raises concerns about the legitimacy of the traffic, indicating possible misuse of infrastructure.
User-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
IP Location
Region: Haryana, India
City: Faridabad
Local time: 2026-07-04 03:12:27