IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (123)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 49
- ReconScanning (node.9c1411): 41
- ReconScanning (node.4dc198): 7
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:11:12
- last_warden_event
- 2026-11-04 22:11:12
- rep
- 0.08715495795936934
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 10000, 10001, 10002, 10010, 10017, 10038, 10039, 10048, 10081, 10134, 10200, 10201, 10205, 10243, 10249, 10254, 10265, 10283, 10445, 10477, 10480, 10554, 10911, 10935, 11000, 11101, 11112, 11210, 11288, 11300, 11371, 11434, 11481, 11688, 12000, 12019, 12088, 12111, 12112, 12114, 12117, 12127, 12143, 12144, 12147, 12153, 12162, 12166, 12185, 12191, 12206, 12212, 12215, 12218, 12230, 12236, 12242, 12247, 12251, 12254, 12255, 12266, 12270, 12274, 12281, 12283, 12290, 12315, 12320, 12322, 12326, 12336, 12337, 12341, 12349, 12357, 12377, 12379, 12380, 12384, 12389, 12394, 12401, 12404, 12406, 12409, 12412, 12414, 12415, 12429, 12435, 12437, 12438, 12448, 12455, 12457, 12460, 12471, 12478, 12479, 12489, 12490, 12499, 12500, 12503, 12505, 12510, 12512, 12518, 12523, 12524, 12528, 12530, 12539, 12540, 12542, 12558, 12569, 12573, 12585, 12586, 12980, 13008, 13128, 13579, 13995, 14024, 14265, 14402, 14406, 14839, 14880, 15038, 15044, 15588, 16002, 16003, 16015, 16017, 16018, 16025, 16027, 16028, 16030, 16036, 16054, 16056, 16062, 16070, 16087, 16088, 16094, 16121, 16666, 16888, 16952, 16992, 16993, 17020, 17100, 17166, 18000, 18001, 18011, 18033, 18039, 18040, 18053, 18063, 18068, 18069, 18070, 18072, 18073, 18081, 18092, 18112, 18225, 18239, 18245, 19000, 19013, 19071, 19080, 19465, 19669, 19902, 20010, 20018, 20030, 20107, 20200, 20256, 20276, 20317, 20600, 20792, 20880, 20894, 20900, 21025, 21100, 21116, 21231, 21232, 21237, 21245, 21254, 21257, 21259, 21264, 21273, 21280, 21292, 21297, 21298, 21304, 21314, 21319, 21320, 21323, 21326, 21330, 21935, 22103, 22556, 22580, 22705, 22944, 23456, 23569, 23728, 23739, 24644, 25001, 25333, 25382, 25565, 27015, 27553, 27571, 28015, 28466, 28986, 29282, 29431, 29742, 29842, 30005, 30006, 30083, 30104, 30110, 30112, 30123, 30327, 30700, 30894, 31017, 31286, 32080, 32102, 32985, 33060, 33344, 34094, 34225, 35000, 35241, 36478, 36935, 37080, 37215, 37443, 37777, 39844, 39902, 39911, 40000, 40001, 40029, 40070, 41373, 41800, 42208, 42420, 43642, 44021, 44157, 44158, 44301, 44320, 44332, 44334, 44510, 44818, 45001, 45635, 45677, 46167, 46862, 47534, 47612, 47990, 48001, 48523, 48538, 49153, 49443, 50003, 50014, 50022, 50102, 51001, 51002, 51235, 52200, 52311, 52881, 52931, 52951, 53192, 54022, 54138, 54624, 54625, 54773, 55000, 55081, 55388, 55490, 55550, 55553, 55554, 55555, 56263, 57786, 58532, 58742, 59443
- Tags: database
- CPEs: cpe:/a:mongodb:mongodb:7.0.43, cpe:/a:mongodb:mongodb:7.0.24, cpe:/a:openssl:openssl:3.0.2, cpe:/a:openssl:openssl:3.0.13, cpe:/a:mongodb:mongodb:8.0.23
- ts_added
- 2026-11-03 17:32:02.247000
- ts_last_update
- 2026-11-09 17:32:10.128000
Warden event timeline
DShield event timeline
Presence on blacklists

