IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (122)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 42
- ReconScanning (node.9c1411): 43
- ReconScanning (node.4dc198): 10
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 11
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:13:13
- last_warden_event
- 2026-11-04 22:13:13
- rep
- 0.08756583045571464
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 10001, 10017, 10027, 10066, 10071, 10090, 10134, 10205, 10210, 10250, 10251, 10255, 10302, 10909, 10911, 10934, 11000, 11065, 11111, 11112, 11182, 11210, 11211, 11288, 11300, 11371, 11443, 11602, 12001, 12016, 12117, 12127, 12128, 12130, 12140, 12143, 12147, 12153, 12154, 12156, 12165, 12172, 12174, 12179, 12187, 12189, 12194, 12201, 12202, 12219, 12220, 12232, 12238, 12243, 12262, 12270, 12273, 12279, 12282, 12285, 12289, 12293, 12298, 12301, 12302, 12303, 12304, 12312, 12313, 12316, 12317, 12326, 12338, 12342, 12345, 12347, 12351, 12353, 12362, 12366, 12369, 12390, 12398, 12403, 12405, 12412, 12425, 12428, 12434, 12440, 12442, 12444, 12446, 12472, 12479, 12482, 12489, 12493, 12494, 12497, 12498, 12514, 12516, 12520, 12522, 12532, 12535, 12541, 12543, 12547, 12554, 12562, 12567, 12572, 12573, 12577, 12582, 12600, 12892, 13001, 13228, 13451, 13530, 14006, 14026, 14265, 14400, 14401, 14895, 14901, 14905, 15502, 15572, 15588, 15831, 16003, 16004, 16006, 16029, 16030, 16034, 16050, 16059, 16065, 16071, 16072, 16074, 16081, 16082, 16094, 16402, 16831, 16961, 16993, 17010, 17070, 17850, 18016, 18033, 18037, 18052, 18054, 18065, 18066, 18067, 18072, 18074, 18078, 18083, 18085, 18097, 18100, 18103, 18113, 18181, 18245, 18281, 18913, 19000, 20000, 20010, 20084, 20121, 20182, 20201, 20256, 20343, 20440, 20512, 20547, 20880, 21017, 21025, 21081, 21084, 21100, 21116, 21231, 21233, 21239, 21240, 21241, 21243, 21251, 21253, 21254, 21257, 21260, 21266, 21271, 21284, 21286, 21287, 21290, 21296, 21298, 21299, 21302, 21313, 21315, 21316, 21379, 21707, 22107, 23004, 23084, 23184, 23456, 24472, 24808, 25001, 25004, 25009, 25082, 25565, 26120, 27015, 27054, 29205, 29679, 29798, 30001, 30007, 30013, 30104, 30110, 30111, 30123, 30473, 30892, 31288, 31337, 32012, 32101, 32400, 32764, 33344, 34225, 34702, 34735, 35000, 35153, 35531, 35961, 36984, 37320, 37744, 37757, 37777, 38524, 38571, 40000, 40099, 40471, 41568, 41800, 42160, 42208, 42424, 43009, 43654, 44158, 44305, 44333, 44399, 44998, 45555, 45823, 46000, 46044, 46173, 46862, 47984, 49080, 49305, 49592, 50000, 50007, 50008, 50010, 50014, 50022, 50201, 50257, 51001, 51007, 51235, 51302, 52311, 52536, 52736, 52869, 52892, 53500, 53943, 54060, 54105, 54138, 54545, 55000, 55080, 55081, 55175, 55443, 55475, 55550, 55555, 56388, 57778, 57787, 57788, 58070, 58622, 59443, 59462, 59469
- Tags: database
- CPEs: cpe:/a:openbsd:openssh:10.3, cpe:/a:mongodb:mongodb:8.0.32, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:cloudflare:cloudflare, cpe:/a:openssl:openssl:3.0.13
- ts_added
- 2026-11-03 17:32:00.607000
- ts_last_update
- 2026-11-09 17:32:10.965000
Warden event timeline
DShield event timeline
Presence on blacklists

