IP address

Search at other sites:

.09123.95.199.24423-95-199-244-host.colocrossing.com

Shodan(more info)

Passive DNS

IP blacklists

blocklist.de IMAP

23.95.199.244 is listed on the blocklist.de IMAP blacklist.

Description: Blocklist.de feed is a free and voluntary service<br>provided by a Fraud/Abuse-specialist. IPs performing attacks<br>on the Service imap, sasl, pop3.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-25 17:05:00.277000
Was present on blacklist at: 2026-03-23 23:05, 2026-03-24 05:05, 2026-03-24 11:05, 2026-03-24 17:05, 2026-03-24 23:05, 2026-03-25 05:05, 2026-03-25 11:05, 2026-03-25 17:05

blocklist.de mail

23.95.199.244 is listed on the blocklist.de mail blacklist.

Description: Blocklist.de feed is a free and voluntary service provided<br>by a Fraud/Abuse-specialist. IPs performing Mail attacks.
Type of feed: primary (feed detail page)

Last checked at: 2026-03-25 17:05:00.314000
Was present on blacklist at: 2026-03-23 23:05, 2026-03-24 05:05, 2026-03-24 11:05, 2026-03-24 17:05, 2026-03-24 23:05, 2026-03-25 05:05, 2026-03-25 11:05, 2026-03-25 17:05

Spamhaus XBL CBL

23.95.199.244 is listed on the Spamhaus XBL CBL blacklist.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-04-02 10:31:40.724000
Was present on blacklist at: 2026-03-26 10:31, 2026-04-02 10:31

Threat categories

TL	Role	Category	Details
49	src	—
38	src	login	port: 25, 465, 587 protocol: smtp

---

Warden events (26)

2026-04-02

IntrusionUserCompromise (node.cfb4f7): 1

2026-03-31

IntrusionUserCompromise (node.cfb4f7): 4

2026-03-26

IntrusionUserCompromise (node.cfb4f7): 4

2026-03-25

AttemptLogin (node.ce2b59): 4

IntrusionUserCompromise (node.cfb4f7): 4

2026-03-24

AttemptLogin (node.ce2b59): 3

2026-03-23

AttemptLogin (node.ce2b59): 1

2026-03-21

IntrusionUserCompromise (node.cfb4f7): 1

2026-03-19

IntrusionUserCompromise (node.cfb4f7): 4

Origin AS

AS36352 - AS-COLOCROSSING

BGP Prefix

23.95.198.0/23

geo

United States, Buffalo

🕑 America/New_York

hostname

23-95-199-244-host.colocrossing.com

hostname_class

['ip_in_hostname']

Address block ('inetnum' or 'NetRange' in whois database)

23.94.0.0 - 23.95.255.255

last_activity

2026-04-02 11:55:36

last_warden_event

2026-04-02 11:55:36

rep

0.09131324404761904

reserved_range

0

Shodan's InternetDB

Open ports: 5228, 5252, 5268, 5280, 5435

Tags: proxy

CPEs: –

ts_added

2026-03-19 10:31:32.902000

ts_last_update

2026-04-06 10:31:40.124000

Warden event timeline

DShield event timeline

Presence on blacklists