IP address

Passive DNS

Tags:

IP blacklists

CI Army

23.111.14.189 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence database that provides scores for IPs. Source of unspecified malicious attacks most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2026-03-18 03:50:00.866000
Was present on blacklist at: 2026-02-25 03:50, 2026-03-12 03:50, 2026-03-13 03:50, 2026-03-15 03:50, 2026-03-16 03:50, 2026-03-17 03:50, 2026-03-18 03:50

DataPlane TELNET login

23.111.14.189 is listed on the DataPlane TELNET login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. IPs trying an unsolicited login via TELNET password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 07:10:01.430000
Was present on blacklist at: 2026-02-26 15:10, 2026-02-26 19:10, 2026-02-26 23:10, 2026-02-27 03:10, 2026-02-27 07:10, 2026-02-27 11:10, 2026-02-27 15:10, 2026-02-27 19:10, 2026-02-27 23:10, 2026-02-28 03:10, 2026-02-28 07:10, 2026-02-28 11:10, 2026-02-28 15:10, 2026-02-28 19:10, 2026-02-28 23:10, 2026-03-01 03:10, 2026-03-01 07:10, 2026-03-01 11:10, 2026-03-01 15:10, 2026-03-01 19:10, 2026-03-01 23:10, 2026-03-02 03:10, 2026-03-02 07:10, 2026-03-02 11:10, 2026-03-02 15:10, 2026-03-02 19:10, 2026-03-02 23:10, 2026-03-03 03:10, 2026-03-03 07:10, 2026-03-03 11:10, 2026-03-03 15:10, 2026-03-03 19:10, 2026-03-03 23:10, 2026-03-04 03:10, 2026-03-04 07:10

DataPlane SMTP greeting

23.111.14.189 is listed on the DataPlane SMTP greeting blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. IPs that are identified as SMTP clients issuing unsolicited HELO or EHLO commands.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-04 11:10:01.577000
Was present on blacklist at: 2026-03-03 15:10, 2026-03-03 19:10, 2026-03-03 23:10, 2026-03-04 03:10, 2026-03-04 07:10, 2026-03-04 11:10

Spamhaus XBL CBL

23.111.14.189 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-05-06 03:50:40.640000
Was present on blacklist at: 2026-03-11 03:50, 2026-03-18 03:50

AbuseIPDB

23.111.14.189 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2026-05-01 04:00:00.624000
Was present on blacklist at: 2026-03-18 05:00, 2026-03-23 05:00, 2026-03-28 05:00, 2026-04-02 04:00, 2026-04-06 04:00, 2026-04-07 04:00, 2026-04-16 04:00, 2026-05-01 04:00

blocklist.de SSH

23.111.14.189 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-05-01 16:05:00.144000
Was present on blacklist at: 2026-04-12 04:05, 2026-04-12 10:05, 2026-04-12 16:05, 2026-04-12 22:05, 2026-04-13 04:05, 2026-04-13 10:05, 2026-04-13 16:05, 2026-04-13 22:05, 2026-04-29 22:05, 2026-04-30 04:05, 2026-04-30 10:05, 2026-04-30 16:05, 2026-04-30 22:05, 2026-05-01 04:05, 2026-05-01 10:05, 2026-05-01 16:05

Threat categories

TL	Role	Category	Details
50	src	scan
39	src	login	protocol: ssh
25	src	—

DShield reports (IP summary, reports)

2026-02-24: Number of reports: 70; Distinct targets: 53
2026-02-25: Number of reports: 70; Distinct targets: 53
2026-02-26: Number of reports: 61; Distinct targets: 45
2026-02-27: Number of reports: 26; Distinct targets: 15
2026-03-01: Number of reports: 64; Distinct targets: 44
2026-03-02: Number of reports: 32; Distinct targets: 25
2026-03-03: Number of reports: 13; Distinct targets: 7
2026-03-04: Number of reports: 26; Distinct targets: 17
2026-03-05: Number of reports: 26; Distinct targets: 17
2026-03-09: Number of reports: 36; Distinct targets: 26
2026-03-10: Number of reports: 34; Distinct targets: 26
2026-03-11: Number of reports: 43; Distinct targets: 34
2026-03-12: Number of reports: 52; Distinct targets: 36
2026-03-13: Number of reports: 52; Distinct targets: 36
2026-03-14: Number of reports: 59; Distinct targets: 41
2026-03-15: Number of reports: 102; Distinct targets: 67
2026-03-16: Number of reports: 101; Distinct targets: 67
2026-03-17: Number of reports: 438; Distinct targets: 270
2026-03-18: Number of reports: 833; Distinct targets: 708
2026-03-19: Number of reports: 24; Distinct targets: 13
2026-03-20: Number of reports: 23; Distinct targets: 17
2026-03-21: Number of reports: 11; Distinct targets: 7
2026-03-22: Number of reports: 292; Distinct targets: 211
2026-03-23: Number of reports: 378; Distinct targets: 302
2026-03-24: Number of reports: 378; Distinct targets: 302
2026-03-25: Number of reports: 30; Distinct targets: 17
2026-03-26: Number of reports: 30; Distinct targets: 17
2026-03-27: Number of reports: 470; Distinct targets: 291
2026-03-28: Number of reports: 610; Distinct targets: 459
2026-03-29: Number of reports: 610; Distinct targets: 459
2026-03-30: Number of reports: 16; Distinct targets: 9
2026-03-31: Number of reports: 16; Distinct targets: 9
2026-04-01: Number of reports: 361; Distinct targets: 271
2026-04-02: Number of reports: 563; Distinct targets: 411
2026-04-03: Number of reports: 21; Distinct targets: 14
2026-04-04: Number of reports: 71; Distinct targets: 46
2026-04-05: Number of reports: 62; Distinct targets: 42
2026-04-06: Number of reports: 392; Distinct targets: 288
2026-04-07: Number of reports: 1096; Distinct targets: 822
2026-04-08: Number of reports: 46; Distinct targets: 25
2026-04-09: Number of reports: 36; Distinct targets: 20
2026-04-10: Number of reports: 44; Distinct targets: 35
2026-04-11: Number of reports: 39; Distinct targets: 23
2026-04-12: Number of reports: 57; Distinct targets: 33
2026-04-13: Number of reports: 27; Distinct targets: 21
2026-04-14: Number of reports: 42; Distinct targets: 27
2026-04-15: Number of reports: 42; Distinct targets: 27
2026-04-16: Number of reports: 34; Distinct targets: 24
2026-04-17: Number of reports: 30; Distinct targets: 22
2026-04-18: Number of reports: 30; Distinct targets: 22
2026-04-20: Number of reports: 28; Distinct targets: 20
2026-04-21: Number of reports: 26; Distinct targets: 16
2026-04-22: Number of reports: 31; Distinct targets: 24
2026-04-23: Number of reports: 26; Distinct targets: 16
2026-04-24: Number of reports: 24; Distinct targets: 17
2026-04-25: Number of reports: 33; Distinct targets: 19
2026-04-26: Number of reports: 27; Distinct targets: 20
2026-04-27: Number of reports: 27; Distinct targets: 20
2026-04-28: Number of reports: 25; Distinct targets: 15
2026-04-29: Number of reports: 31; Distinct targets: 12
2026-04-30: Number of reports: 31; Distinct targets: 12
2026-05-01: Number of reports: 446; Distinct targets: 285
2026-05-02: Number of reports: 116; Distinct targets: 63
2026-05-03: Number of reports: 116; Distinct targets: 63
2026-05-04: Number of reports: 69; Distinct targets: 56
2026-05-05: Number of reports: 118; Distinct targets: 69

Origin AS: AS59253 - LEASEWEB-APAC-SIN-11
BGP Prefix: 23.111.14.0/23
geo: Singapore; 🕑 Asia/Singapore
hostname: l608.scanner.modat.io
Address block ('inetnum' or 'NetRange' in whois database): 23.111.12.0 - 23.111.15.255
reserved_range: 0
ts_added: 2026-02-25 03:50:35.666000
ts_last_update: 2026-05-06 05:01:24.472000

Warden event timeline

DShield event timeline

Presence on blacklists