185.106.28.127
IP Risk Score: 80 / 100
This IP is considered high risk and shows signs of malicious behavior. Strong indicators point to automated scanning or suspicious access attempts. This assessment is backed by strong and consistent detection signals. The combined indicators suggest a high overall security risk. Defensive measures such as rate limiting or blocking are recommended.
What is this IP address?
Iraq (IQ)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of automated behavior with a malformed user-agent and no JavaScript support, indicating potential bot activity. The access pattern is suspicious, particularly given the lack of reverse DNS and the nature of the request.
The supernet (185.106.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs accessing the same site using a mix of outdated and modern user agents, suggesting potential automation. However, the lack of honeypot hits and the presence of legitimate ISP information indicate that the activity may not be malicious but rather indicative of automated scraping or bot behavior.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36
IP Location
Region: Erbil, Iraq
City: Erbil
Local time: 2026-07-04 00:42:35