149.57.180.121
IP Risk Score: 89 / 100
This IP is considered potentially malicious and poses a serious security threat. Activity from this IP is consistent with active and malicious behavior. This assessment is backed by strong and consistent detection signals. The IP represents a severe and confirmed security risk. Immediate blocking or mitigation is strongly recommended.
What is this IP address?
United States (US)
Conf. level: 100 / 100
Observed Client Profile
- OS: Linux (100%)
- Device Type: Desktop (100%)
- Browser Family: Firefox (100%)
- Rendering Engine: Gecko (100%)
Behavioral Indicators
The IP shows signs of malicious intent with a honeypot hit and lacks reverse DNS. The user-agent appears to be a standard browser but lacks JavaScript support, indicating potential automation. The single event from a hosting provider raises concerns about probing activity.
The supernet (149.57.0.0/16), which this IP belongs to, exhibits coordinated low-interaction behavior with repetitive one-page visits across multiple IPs, all utilizing the same user agent. The lack of DNS resolution and the presence of honeypot hits suggest potential misuse of legitimate infrastructure, indicating a high likelihood of automated scraping or bot activity.
JavaScript Support
⚠️ NoUser-Agent Samples
- Mozilla/5.0 (X11; Linux i686; rv:109.0) Gecko/20100101 Firefox/120.0
IP Location
Region: New York, United States
City: New York
Local time: 2026-07-01 16:32:53