IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

Protect your system

What is this IP address?

IP Address: 149.143.136.227

Country: United States flag

United States (US)

Region Name: New York (NY)

City: New York

ISP: Windstream Communications LLC

Threat level: 100 / 100
Conf. level: 100 / 100

Properties

ASN: AS7029

AS Name: Windstream Communications LLC

Timezone: America/New_York

Status: Critical

Proxy

Observed Client Profile

OS: Windows (40%)
Device Type: Desktop (100%)
Browser Family: Chrome (53%)
Rendering Engine: Gecko (100%)

High variability

Behavioral Indicators

The IP address has exhibited highly suspicious behavior, including multiple honeypot hits and repeated access attempts to sensitive files, all resulting in 403/404 responses. The absence of reverse DNS and the use of a proxy further indicate potential malicious intent. The lack of JavaScript support strongly suggests bot activity.

The supernet (149.143.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs using identical user agents and low-interaction, repetitive one-page visits, indicating potential stealth automation or scraping activity. The lack of legitimate RDNS and forward DNS matches raises concerns about the legitimacy of the traffic, suggesting possible misuse of proxy infrastructure.

🍯

Honeypot Hit

📡

Scanner

JavaScript Support

⚠️ No

User-Agent Samples

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3 Safari/605.1.15
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0

Integrate IPIntel into your system

IP Location

Region: New York, United States

City: New York

Local time: 2026-06-22 02:29:57

Subnet
149.143.136.0/24
Supernet
149.143.0.0/16