IP address

Search at other sites:
.30349.254.204.134
Shodan(more info)
Passive DNS
Tags: Residential proxy
IP blacklists
UCEPROTECT L1
49.254.204.134 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-11-01 08:45:00.592000
Was present on blacklist at: 2026-10-31 16:45, 2026-11-01 00:45, 2026-11-01 08:45
FireHOL anonymizers
49.254.204.134 is listed on the FireHOL anonymizers blacklist.

Description: List of anonymizing IPs, aggregated from multiple lists by FireHOL.
Type of feed: secondary (feed detail page)

Last checked at: 2026-11-01 06:05:19
Was present on blacklist at: 2026-11-01 06:05

Threat categories

TLRoleCategoryDetails
35 src login port: 25, 465, 587
protocol: smtp
31 src —
Warden events (4)
2026-10-31
AttemptLogin (node.ce2b59): 1
IntrusionUserCompromise (node.cfb4f7): 2
2026-10-30
AttemptLogin (node.ce2b59): 1
Residential proxy info (data provided by Layer3 Intel)
Last seen: 2026-10-11 04:29:21}
Percent days seen: 70 %
Networks: INFATICA, PROXYRACK, BOTTINGTOOLS, BYTEPROXIES, EVOMI, IPROYAL, GONZOPROXY, BYTEFUL, PROXY-SELLER, PROXYMA, INFINITEPROXIES, AKE.NET, VITALEXCLUSIVE, CLIPROXY, MANGOPROXY, IPFLY, BUYINGPROXY, BOTTINGTOOLS_BASIC, DATARAMA
Details: https://layer3intel.com/context/49.254.204.134
Origin AS
AS4766 - KIXS-AS-KR KIXS-AS-KR-KR
BGP Prefix
49.254.128.0/17
geo
South Korea, Yongin-si
🕑 Asia/Seoul
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
49.254.0.0 - 49.254.255.255
last_activity
2026-10-31 11:47:03
last_warden_event
2026-10-31 11:47:03
rep
0.3026966119829214
reserved_range
0
ts_added
2026-10-30 10:01:14.820000
ts_last_update
2026-11-01 10:01:20.323000

Warden event timeline

DShield event timeline

Presence on blacklists