IP address

Passive DNS

Tags: IP in hostname

IP blacklists: Echelon SIP register scanner
23.94.182.11 was recently listed on the Echelon SIP register scanner blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: SIP VoIP registration scanning on port 5060
Type of feed: primary (feed detail page)

Last checked at: 2026-10-11 09:30:00.752000
Was present on blacklist at: 2026-10-07 09:30, 2026-10-08 09:30, 2026-10-09 09:30, 2026-10-10 09:30, 2026-10-11 09:30
Spamhaus SBL
23.94.182.11 was recently listed on the Spamhaus SBL blacklist, but currently it is not.

Description: The Spamhaus Block List ("SBL") Advisory is a database of IP addresses from which Spamhaus does not recommend the acceptance of electronic mail.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-10-07 09:30:04.921000
Was present on blacklist at: 2026-10-07 09:30

TL	Role	Category	Details
25	src	scan

Origin AS: AS36352 - AS-COLOCROSSING
BGP Prefix: 23.94.182.0/23
geo: United States, Buffalo; 🕑 America/New_York
hostname: 23-94-182-11-host.colocrossing.com
hostname_class: ['ip_in_hostname']
Address block ('inetnum' or 'NetRange' in whois database): 23.94.0.0 - 23.95.255.255
rep: 0.0
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 135; Tags: –; CPEs: cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1
ts_added: 2026-10-07 09:30:04.865000
ts_last_update: 2026-10-12 09:30:11.796000

Warden event timeline

DShield event timeline

Presence on blacklists