129.213.128.11
IP Risk Score: 81 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Properties
Observed Client Profile
- OS: Windows (100%)
- Device Type: Desktop (100%)
- Browser Family: Chrome (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP address is associated with Oracle Cloud Infrastructure and shows signs of potential automated activity. The user-agent is structured but lacks JavaScript support, which raises concerns about its legitimacy. The absence of RDNS and the cloud hosting environment further contribute to the suspicion.
The supernet (129.213.0.0/16), which this IP belongs to, exhibits suspicious behavior characterized by repetitive, low-interaction visits primarily resulting in 403 errors, suggesting potential stealth automation or scanning activity. The use of identical user agents across multiple IPs, combined with a lack of forward DNS resolution, raises concerns about coordinated scraping or bot activity.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
IP Location
Region: Virginia, United States
City: Ashburn
Local time: 2026-06-22 20:22:54