IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

Protect your system

What is this IP address?

IP Address: 149.143.128.180

Country: United States flag

United States (US)

Region Name: Virginia (VA)

City: Reston

ISP: Windstream Communications LLC

Threat level: 100 / 100
Conf. level: 100 / 100

Properties

ASN: AS7029

AS Name: Windstream Communications LLC

Timezone: America/New_York

Status: Critical

Proxy

Observed Client Profile

OS: Windows (50%)
Device Type: Desktop (100%)
Browser Family: Firefox (50%)
Rendering Engine: Gecko (100%)

High variability

Behavioral Indicators

The IP has exhibited highly suspicious behavior with multiple honeypot hits and repeated access to sensitive paths, indicating potential malicious intent. The absence of valid RDNS and detection of missing JavaScript support further suggest automated probing activity.

The supernet (149.143.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs using identical user agents and low-interaction, repetitive one-page visits, indicating potential stealth automation or scraping activity. The lack of legitimate RDNS and forward DNS matches raises concerns about the legitimacy of the traffic, suggesting possible misuse of proxy infrastructure.

🍯

Honeypot Hit

📡

Scanner

JavaScript Support

⚠️ No

User-Agent Samples

Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:124.0) Gecko/20100101 Firefox/124.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0

Integrate IPIntel into your system

IP Location

Region: Virginia, United States

City: Reston

Local time: 2026-06-22 04:37:14

Subnet
149.143.128.0/24
Supernet
149.143.0.0/16