IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

Protect your system

What is this IP address?

IP Address: 149.143.128.57

Country: United States flag

United States (US)

Region Name: Virginia (VA)

City: Reston

ISP: Windstream Communications LLC

Threat level: 100 / 100
Conf. level: 100 / 100

Properties

ASN: AS7029

AS Name: Windstream Communications LLC

Timezone: America/New_York

Status: Critical

Proxy

Observed Client Profile

OS: Windows (63%)
Device Type: Desktop (100%)
Browser Family: Chrome (75%)
Rendering Engine: Gecko (100%)

Variability

Behavioral Indicators

The IP has exhibited highly suspicious behavior with multiple requests targeting sensitive environment files, all resulting in 404 responses. The absence of JavaScript support and the use of a proxy indicate automated scraping activity. The high number of honeypot hits further suggests malicious intent.

The supernet (149.143.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs using identical user agents and low-interaction, repetitive one-page visits, indicating potential stealth automation or scraping activity. The lack of legitimate RDNS and forward DNS matches raises concerns about the legitimacy of the traffic, suggesting possible misuse of proxy infrastructure.

🍯

Honeypot Hit

📡

Scanner

JavaScript Support

⚠️ No

User-Agent Samples

Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 OPR/110.0.0.0

Integrate IPIntel into your system

IP Location

Region: Virginia, United States

City: Reston

Local time: 2026-06-22 04:36:36

Subnet
149.143.128.0/24
Supernet
149.143.0.0/16