IP address


.293202.4.106.18
Shodan(more info)
Passive DNS
Tags: Residential proxy
IP blacklists
UCEPROTECT L1
202.4.106.18 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-06 07:45:00.788000
Was present on blacklist at: 2026-09-24 23:45, 2026-09-25 07:45, 2026-09-25 15:45, 2026-09-25 23:45, 2026-09-26 07:45, 2026-09-26 15:45, 2026-09-26 23:45, 2026-09-27 07:45, 2026-09-27 15:45, 2026-09-27 23:45, 2026-09-28 07:45, 2026-09-28 15:45, 2026-09-28 23:45, 2026-09-29 07:45, 2026-09-29 15:45, 2026-09-29 23:45, 2026-09-30 07:45, 2026-09-30 15:45, 2026-09-30 23:45, 2026-10-01 07:45, 2026-10-01 15:45, 2026-10-01 23:45, 2026-10-02 07:45, 2026-10-02 15:45, 2026-10-02 23:45, 2026-10-03 07:45, 2026-10-03 15:45, 2026-10-03 23:45, 2026-10-04 07:45, 2026-10-04 15:45, 2026-10-04 23:45, 2026-10-05 07:45, 2026-10-05 15:45, 2026-10-05 23:45, 2026-10-06 07:45
Spamhaus SBL CSS
202.4.106.18 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-01 23:56:00.588000
Was present on blacklist at: 2026-09-24 23:55, 2026-10-01 23:56
Spamhaus XBL CBL
202.4.106.18 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-01 23:56:00.588000
Was present on blacklist at: 2026-09-24 23:55, 2026-10-01 23:56
SpamCop
202.4.106.18 was recently listed on the SpamCop blacklist, but currently it is not.

Description: The SpamCop Blocking List (SCBL) lists IP addresses which have transmitted reported email to SpamCop users.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-01 23:56:00.588000
Was present on blacklist at: 2026-09-24 23:55, 2026-10-01 23:56
PSBL
202.4.106.18 is listed on the PSBL blacklist.

Description: The Passive Spam Block List uses the Spamikaze software to detect spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-10-06 07:45:00.418000
Was present on blacklist at: 2026-09-27 23:45, 2026-09-28 07:45, 2026-09-28 15:45, 2026-09-28 23:45, 2026-09-29 07:45, 2026-09-29 15:45, 2026-09-29 23:45, 2026-09-30 07:45, 2026-09-30 15:45, 2026-09-30 23:45, 2026-10-01 07:45, 2026-10-01 15:45, 2026-10-01 23:45, 2026-10-02 07:45, 2026-10-02 15:45, 2026-10-02 23:45, 2026-10-03 07:45, 2026-10-03 15:45, 2026-10-03 23:45, 2026-10-04 07:45, 2026-10-04 15:45, 2026-10-04 23:45, 2026-10-05 07:45, 2026-10-05 15:45, 2026-10-05 23:45, 2026-10-06 07:45

Threat categories

TLRoleCategoryDetails
41 src —
40 src spam

Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-08-30 10:29:04}
Percent days seen: 10 %
Networks: LEMONBRIGHT, VITALEXCLUSIVE
Details: https://layer3intel.com/context/202.4.106.18
Origin AS
AS23956 - AMBERIT-BD-AS
BGP Prefix
202.4.106.0/24
geo
Bangladesh, Dhaka
🕑 Asia/Dhaka
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
202.4.96.0 - 202.4.127.255
rep
0.2928932188134524
reserved_range
0
Shodan's InternetDB
Open ports: 2000
Tags: –
CPEs: –
ts_added
2026-09-24 23:55:53.973000
ts_last_update
2026-10-06 07:58:20.065000

Warden event timeline

DShield event timeline

Presence on blacklists