IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (144)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 51
- ReconScanning (node.9c1411): 46
- ReconScanning (node.4dc198): 20
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 11
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:12:24
- last_warden_event
- 2026-11-04 22:12:24
- rep
- 0.08762570040098094
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 443, 10000, 10001, 10002, 10011, 10029, 10031, 10032, 10037, 10038, 10050, 10051, 10086, 10090, 10093, 10100, 10101, 10205, 10243, 10250, 10399, 10480, 10911, 10933, 10936, 11000, 11027, 11082, 11112, 11211, 11288, 11480, 11481, 11920, 12000, 12016, 12056, 12101, 12106, 12135, 12141, 12143, 12146, 12148, 12149, 12153, 12156, 12160, 12165, 12167, 12173, 12177, 12180, 12181, 12186, 12192, 12193, 12197, 12199, 12204, 12205, 12212, 12213, 12215, 12220, 12225, 12228, 12231, 12233, 12237, 12240, 12246, 12248, 12253, 12256, 12284, 12285, 12288, 12291, 12292, 12305, 12314, 12320, 12325, 12329, 12330, 12345, 12346, 12354, 12361, 12375, 12384, 12387, 12395, 12396, 12411, 12421, 12424, 12439, 12441, 12451, 12472, 12474, 12475, 12487, 12493, 12512, 12513, 12519, 12523, 12526, 12535, 12536, 12539, 12554, 12556, 12563, 12565, 12580, 12581, 12902, 12968, 13084, 13228, 13429, 13855, 14084, 14147, 14265, 14873, 14880, 14905, 14909, 15313, 15502, 15672, 15675, 15831, 16000, 16003, 16009, 16014, 16019, 16024, 16026, 16027, 16030, 16035, 16037, 16045, 16047, 16052, 16054, 16055, 16062, 16063, 16064, 16069, 16072, 16076, 16086, 16090, 16093, 16099, 16100, 16101, 16390, 16402, 16443, 16572, 16831, 16833, 16993, 17020, 17408, 17770, 17777, 18007, 18014, 18023, 18027, 18031, 18032, 18044, 18054, 18056, 18058, 18061, 18078, 18081, 18087, 18088, 18091, 18103, 18107, 18111, 18182, 18224, 18245, 18590, 18789, 18888, 19017, 19022, 19071, 19080, 19091, 20000, 20107, 20185, 20201, 20256, 20440, 20547, 20591, 21081, 21100, 21116, 21231, 21244, 21246, 21250, 21251, 21253, 21254, 21260, 21261, 21272, 21308, 21325, 21328, 21379, 21381, 21515, 21834, 22022, 22103, 22191, 22705, 23023, 23082, 23182, 23411, 23456, 24044, 24240, 24808, 25001, 25010, 25318, 25565, 25979, 26197, 26425, 27015, 27228, 28015, 28080, 28770, 29528, 29639, 30025, 30027, 30983, 31380, 32202, 32303, 32443, 32764, 33045, 33060, 33344, 34126, 34660, 35000, 35101, 35140, 35251, 35454, 35583, 36607, 36627, 37015, 37215, 37777, 40000, 40070, 40422, 40584, 41303, 41800, 42420, 42952, 43080, 43644, 43853, 44305, 44310, 44337, 44400, 44410, 44924, 44956, 45001, 45786, 45881, 46413, 47001, 47116, 47984, 47990, 48000, 48889, 49152, 49501, 49692, 49738, 49971, 50006, 50007, 50008, 50012, 50070, 50073, 50101, 50104, 50106, 50107, 50122, 51005, 51007, 51201, 51235, 52292, 52439, 52517, 53481, 53576, 53776, 53866, 54094, 54138, 54545, 54712, 55000, 55470, 55475, 55481, 55550, 55553, 56160, 57333, 57779, 57783, 57785, 57787, 58414, 58551, 58756
- Tags: database
- CPEs: cpe:/a:mongodb:mongodb:7.0.34, cpe:/a:mongodb:mongodb:8.0.32, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:8.9p1, cpe:/a:openssl:openssl:3.0.2, cpe:/a:openssl:openssl:3.0.13
- ts_added
- 2026-11-03 17:31:55.369000
- ts_last_update
- 2026-11-09 17:32:01.447000
Warden event timeline
DShield event timeline
Presence on blacklists

