IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (128)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 49
- ReconScanning (node.9c1411): 43
- ReconScanning (node.4dc198): 10
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:13:41
- last_warden_event
- 2026-11-04 22:13:41
- rep
- 0.08717447006916879
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 443, 10001, 10013, 10017, 10020, 10025, 10026, 10039, 10043, 10044, 10047, 10052, 10066, 10075, 10101, 10134, 10243, 10283, 10324, 10380, 10393, 10443, 10500, 10554, 10810, 10911, 10934, 10936, 11112, 11211, 11288, 11300, 11920, 11949, 12000, 12001, 12056, 12082, 12084, 12107, 12115, 12122, 12145, 12151, 12153, 12156, 12158, 12169, 12181, 12183, 12184, 12192, 12201, 12214, 12235, 12252, 12253, 12255, 12256, 12266, 12278, 12285, 12289, 12292, 12295, 12299, 12304, 12308, 12329, 12330, 12334, 12336, 12345, 12346, 12348, 12355, 12356, 12359, 12380, 12396, 12400, 12401, 12413, 12414, 12441, 12447, 12449, 12451, 12453, 12465, 12470, 12487, 12497, 12500, 12503, 12507, 12528, 12538, 12540, 12544, 12547, 12551, 12554, 12569, 12580, 12585, 12589, 12590, 12601, 12615, 12944, 13107, 13333, 14101, 14147, 14184, 14265, 14403, 14404, 14443, 14837, 14873, 14875, 14880, 14896, 14900, 15044, 15151, 15443, 15555, 15672, 15682, 16007, 16012, 16013, 16014, 16024, 16025, 16031, 16045, 16064, 16077, 16086, 16088, 16096, 16097, 16400, 16443, 16530, 16993, 17001, 17020, 17084, 17165, 17195, 17443, 17772, 17775, 17780, 18010, 18019, 18020, 18030, 18038, 18039, 18053, 18064, 18071, 18076, 18081, 18086, 18090, 18098, 18099, 18104, 18107, 18200, 18239, 18245, 18327, 18443, 19000, 19013, 19022, 19091, 19233, 19978, 20040, 20107, 20201, 20256, 20512, 21025, 21100, 21230, 21233, 21241, 21244, 21245, 21253, 21260, 21261, 21270, 21283, 21285, 21287, 21289, 21297, 21302, 21303, 21310, 21312, 21314, 21317, 21323, 21329, 21379, 22000, 22206, 23456, 24065, 24472, 24693, 25001, 25002, 25084, 25475, 25565, 25762, 25782, 26830, 27017, 27939, 27980, 28001, 28017, 28473, 30083, 30101, 30106, 30386, 30452, 30700, 31337, 31589, 32001, 32080, 32444, 32464, 32703, 32764, 33060, 35000, 35554, 37080, 37086, 37158, 37215, 37349, 37895, 37930, 38520, 38663, 38875, 39001, 39046, 40099, 40526, 40535, 40892, 42029, 42443, 42495, 43219, 44158, 44300, 44302, 44304, 44309, 44345, 44410, 44500, 44510, 44520, 44818, 45111, 45220, 45444, 45668, 45677, 45821, 45963, 46000, 46073, 46782, 47420, 48533, 49080, 49151, 49153, 49444, 49575, 49682, 49688, 49690, 49721, 50011, 50050, 50070, 50080, 50101, 50105, 50113, 50122, 50202, 50257, 50777, 51106, 51235, 52311, 52536, 52869, 52931, 53806, 54022, 54138, 55000, 55470, 55490, 55550, 55554, 55555, 57574, 57783, 57785, 58000, 58585, 58756, 59203, 60000
- Tags: database
- CPEs: cpe:/a:nodejs:node.js, cpe:/a:expressjs:express, cpe:/a:openssl:openssl:3.0.13, cpe:/a:mongodb:mongodb:8.0.32
- ts_added
- 2026-11-03 17:32:04.119000
- ts_last_update
- 2026-11-09 17:32:12.511000
Warden event timeline
DShield event timeline
Presence on blacklists

