IP address

Search at other sites:
.02149.236.111.184
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
Echelon TLS/SSL crawler
49.236.111.184 is listed on the Echelon TLS/SSL crawler blacklist.

Description: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-03-11 10:40:00.635000
Was present on blacklist at: 2026-03-05 10:40, 2026-03-06 10:40, 2026-03-09 10:40, 2026-03-10 10:40, 2026-03-11 10:40
Echelon web crawler
49.236.111.184 is listed on the Echelon web crawler blacklist.

Description: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-03-11 10:50:00.465000
Was present on blacklist at: 2026-03-05 10:50, 2026-03-06 10:50, 2026-03-09 10:50, 2026-03-10 10:50, 2026-03-11 10:50

Threat categories

TLRoleCategoryDetails
48 src scan
Warden events (15)
2026-03-30
ReconScanning (node.4dc198): 3
2026-03-16
ReconScanning (node.4dc198): 3
2026-03-13
ReconScanning (node.4dc198): 3
2026-03-11
ReconScanning (node.368407): 3
2026-03-07
ReconScanning (node.368407): 3
DShield reports (IP summary, reports)
2026-02-26
Number of reports: 20
Distinct targets: 20
2026-04-06
Number of reports: 10
Distinct targets: 5
Origin AS
AS17858 - POWERVIS-AS-KR POWERVIS-AS-KR-KR
BGP Prefix
49.236.96.0/19
geo
South Korea, Ansan-si
🕑 Asia/Seoul
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
49.236.64.0 - 49.236.127.255
last_activity
2026-03-30 20:45:08
last_warden_event
2026-03-30 20:45:08
rep
0.020833333333333332
reserved_range
0
ts_added
2026-02-27 05:00:56.361000
ts_last_update
2026-04-08 05:01:00.734000

Warden event timeline

DShield event timeline

Presence on blacklists