IP Risk Score: 100 / 100

This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.

Protect your system

What is this IP address?

IP Address: 149.143.131.35

Country: United States flag

United States (US)

Region Name: Virginia (VA)

City: Ashburn

ISP: Windstream Communications LLC

Threat level: 100 / 100
Conf. level: 100 / 100

Properties

ASN: AS7029

AS Name: Windstream Communications LLC

Timezone: America/New_York

Status: Critical

Proxy

Observed Client Profile

OS: Windows (38%)
Device Type: Desktop (100%)
Browser Family: Chrome (63%)
Rendering Engine: Gecko (100%)

High variability

Behavioral Indicators

The IP has exhibited highly suspicious behavior, including multiple requests to sensitive paths with consistent 404 responses and a lack of JavaScript support, indicating potential automated scraping activity. The presence of numerous honeypot hits further suggests malicious intent.

The supernet (149.143.0.0/16), which this IP belongs to, exhibits coordinated behavior with multiple IPs using identical user agents and low-interaction, repetitive one-page visits, indicating potential stealth automation or scraping activity. The lack of legitimate RDNS and forward DNS matches raises concerns about the legitimacy of the traffic, suggesting possible misuse of proxy infrastructure.

🍯

Honeypot Hit

📡

Scanner

JavaScript Support

⚠️ No

User-Agent Samples

Mozilla/5.0 (X11; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36
Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Integrate IPIntel into your system

IP Location

Region: Virginia, United States

City: Ashburn

Local time: 2026-06-23 09:07:45

Subnet
149.143.131.0/24
Supernet
149.143.0.0/16