IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (131)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 55
- ReconScanning (node.4dc198): 9
- ReconScanning (node.9c1411): 41
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 29 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:11:15
- last_warden_event
- 2026-11-04 22:11:15
- rep
- 0.08718331418290537
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 10000, 10001, 10004, 10007, 10011, 10012, 10017, 10023, 10028, 10030, 10034, 10035, 10040, 10042, 10046, 10048, 10052, 10066, 10075, 10084, 10100, 10205, 10225, 10243, 10250, 10390, 10399, 10765, 10909, 10911, 10973, 11112, 11173, 11210, 11211, 11258, 11288, 11300, 11434, 11601, 12000, 12084, 12101, 12110, 12114, 12117, 12128, 12138, 12141, 12145, 12146, 12147, 12149, 12153, 12159, 12166, 12170, 12187, 12198, 12200, 12204, 12207, 12208, 12211, 12215, 12219, 12224, 12236, 12244, 12247, 12256, 12257, 12258, 12260, 12268, 12269, 12272, 12274, 12275, 12281, 12283, 12286, 12290, 12295, 12309, 12319, 12328, 12330, 12342, 12362, 12364, 12376, 12379, 12381, 12384, 12387, 12394, 12395, 12408, 12422, 12425, 12431, 12432, 12436, 12442, 12444, 12448, 12454, 12457, 12461, 12475, 12478, 12479, 12482, 12484, 12495, 12499, 12501, 12502, 12512, 12513, 12525, 12526, 12528, 12530, 12540, 12542, 12545, 12547, 12549, 12563, 12564, 12570, 12573, 12579, 12581, 12586, 13000, 13034, 13378, 13579, 14006, 14101, 14147, 14265, 14330, 14402, 14825, 14905, 15006, 15009, 15040, 15042, 15555, 15672, 16003, 16005, 16007, 16008, 16016, 16021, 16023, 16039, 16052, 16053, 16062, 16067, 16080, 16082, 16083, 16088, 16090, 16101, 16197, 16800, 16831, 17100, 17770, 17778, 18007, 18014, 18024, 18026, 18027, 18048, 18069, 18079, 18081, 18085, 18088, 18091, 18095, 18096, 18107, 18108, 18110, 18200, 18245, 18369, 18789, 19000, 19090, 19233, 19776, 20000, 20010, 20030, 20070, 20082, 20090, 20106, 20200, 20256, 20287, 20443, 20547, 20880, 21002, 21025, 21116, 21200, 21235, 21237, 21254, 21258, 21259, 21270, 21271, 21283, 21285, 21289, 21290, 21291, 21301, 21321, 21379, 21381, 21515, 22000, 22022, 22206, 22556, 22705, 23424, 23456, 23768, 24472, 24941, 25001, 25004, 25010, 25105, 25144, 25565, 25623, 26047, 26061, 26070, 26527, 26726, 28015, 30000, 30006, 30011, 30015, 30019, 30083, 30101, 30110, 30121, 30158, 30444, 31337, 32001, 32303, 32400, 32764, 33344, 33389, 33698, 33949, 34196, 34814, 34970, 35000, 35153, 35241, 35250, 35487, 35907, 36501, 37215, 37777, 37785, 38520, 40099, 41206, 41800, 43298, 44158, 44194, 44300, 44302, 44305, 44332, 44420, 44818, 45006, 45333, 45444, 45667, 45668, 47534, 47990, 48001, 48013, 48020, 48732, 49037, 49152, 49210, 49686, 49690, 50000, 50007, 50013, 50042, 50070, 50080, 50104, 50107, 50160, 50353, 50803, 50996, 51001, 51002, 51007, 51201, 51211, 52869, 52931, 53293, 53480, 53483, 53490, 54138, 54319, 54327, 54371, 54857, 55000, 55025, 55055, 55388, 55442, 55475, 55550, 55553, 55555, 55848, 56036, 56156, 56797, 57780, 58000, 58180, 58443, 58562, 59194, 59343, 59498
- Tags: database
- CPEs: cpe:/a:mongodb:mongodb:8.0.18, cpe:/a:mongodb:mongodb:8.0.32, cpe:/o:canonical:ubuntu_linux, cpe:/a:openbsd:openssh:9.6p1, cpe:/a:openssl:openssl:3.0.13
- ts_added
- 2026-11-03 17:31:54.700000
- ts_last_update
- 2026-11-09 17:32:00.873000
Warden event timeline
DShield event timeline
Presence on blacklists

