IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (127)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 45
- ReconScanning (node.9c1411): 43
- ReconScanning (node.4dc198): 13
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 29 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:11:21
- last_warden_event
- 2026-11-04 22:11:21
- rep
- 0.08717108907972537
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 443, 10001, 10005, 10007, 10011, 10014, 10032, 10044, 10046, 10071, 10089, 10101, 10205, 10243, 10254, 10380, 10390, 10393, 10397, 10398, 10477, 10554, 10911, 10933, 11000, 11027, 11101, 11112, 11211, 11288, 11596, 11602, 11680, 11701, 12016, 12088, 12108, 12110, 12122, 12137, 12138, 12152, 12156, 12163, 12164, 12166, 12167, 12193, 12194, 12197, 12200, 12202, 12208, 12212, 12219, 12221, 12230, 12231, 12235, 12241, 12244, 12250, 12261, 12262, 12272, 12283, 12285, 12292, 12296, 12299, 12300, 12306, 12311, 12316, 12319, 12324, 12335, 12343, 12346, 12350, 12362, 12366, 12367, 12379, 12386, 12388, 12398, 12407, 12415, 12421, 12425, 12440, 12444, 12445, 12448, 12453, 12457, 12472, 12478, 12482, 12495, 12503, 12504, 12510, 12519, 12521, 12522, 12524, 12531, 12543, 12558, 12562, 12568, 12584, 12980, 13128, 13133, 13467, 13537, 14004, 14101, 14147, 14182, 14265, 14330, 14344, 14401, 14508, 14524, 14873, 14875, 14896, 14901, 15001, 15006, 15502, 15717, 15831, 15926, 16001, 16008, 16014, 16019, 16028, 16029, 16031, 16035, 16039, 16042, 16058, 16062, 16068, 16074, 16079, 16091, 16092, 16094, 16096, 16175, 16237, 16311, 16316, 16403, 16548, 16831, 16993, 17000, 17020, 17055, 17082, 17102, 17503, 17772, 17774, 18009, 18012, 18015, 18030, 18031, 18032, 18047, 18048, 18054, 18060, 18069, 18081, 18082, 18085, 18087, 18088, 18092, 18093, 18098, 18102, 18107, 18111, 18245, 18443, 19000, 19014, 19015, 19071, 19091, 20010, 20263, 20547, 20770, 20880, 21025, 21081, 21082, 21230, 21233, 21234, 21237, 21239, 21240, 21241, 21252, 21259, 21262, 21291, 21292, 21296, 21297, 21298, 21305, 21312, 21315, 21379, 22345, 22507, 22556, 22705, 23456, 24058, 25001, 25002, 25003, 25061, 25565, 27015, 27017, 27536, 28173, 28858, 29694, 30007, 30010, 30101, 30106, 30120, 30123, 31017, 32001, 32080, 32764, 32798, 32800, 33060, 33084, 33344, 33638, 34293, 34500, 35000, 35100, 35240, 35606, 36505, 36983, 37080, 37541, 37777, 38520, 38880, 39748, 39921, 41424, 41800, 42982, 43008, 43221, 43605, 44098, 44301, 44304, 44306, 44320, 44350, 44444, 44818, 45003, 45111, 45444, 45666, 45765, 46000, 46594, 47129, 48224, 48888, 49690, 50000, 50005, 50008, 50009, 50042, 50105, 50580, 50995, 50996, 50997, 50999, 51106, 51235, 52230, 52311, 52951, 53134, 54138, 54286, 54545, 55000, 55388, 55443, 55550, 55553, 55554, 55555, 56016, 56180, 56779, 56786, 57535, 57783, 57788, 57930, 57988, 58094, 58378, 58585, 59443
- Tags: eol-product, proxy, database
- CPEs: cpe:/a:elastic:elasticsearch:9.0.2, cpe:/a:openssl:openssl:3.0.13, cpe:/a:mongodb:mongodb:8.0.32
- ts_added
- 2026-11-03 17:32:00.794000
- ts_last_update
- 2026-11-09 17:32:10.102000
Warden event timeline
DShield event timeline
Presence on blacklists

