IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (125)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 43
- ReconScanning (node.4dc198): 14
- ReconScanning (node.9c1411): 42
- 2026-11-03
-
- ReconScanning (node.ce2b59): 17
- ReconScanning (node.9c1411): 9
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:12:32
- last_warden_event
- 2026-11-04 22:12:32
- rep
- 0.07703690779079586
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 80, 443, 10001, 10007, 10020, 10023, 10024, 10043, 10047, 10048, 10080, 10084, 10086, 10134, 10181, 10201, 10399, 10444, 10554, 10909, 10935, 11000, 11084, 11101, 11112, 11211, 11288, 11371, 11496, 11681, 11701, 12000, 12088, 12106, 12107, 12110, 12111, 12120, 12121, 12124, 12141, 12153, 12194, 12195, 12196, 12197, 12199, 12208, 12209, 12211, 12225, 12236, 12247, 12255, 12270, 12276, 12277, 12295, 12314, 12322, 12332, 12333, 12336, 12345, 12347, 12361, 12365, 12374, 12375, 12378, 12379, 12389, 12390, 12394, 12424, 12431, 12435, 12439, 12454, 12459, 12461, 12470, 12476, 12483, 12488, 12489, 12504, 12507, 12510, 12512, 12520, 12521, 12530, 12536, 12538, 12543, 12547, 12549, 12555, 12558, 12564, 12565, 12567, 12572, 12574, 12577, 12581, 12584, 12588, 13061, 13110, 14006, 14147, 14182, 14402, 14403, 14404, 14524, 14825, 14875, 14895, 15084, 15151, 15484, 16006, 16013, 16022, 16026, 16033, 16079, 16097, 16404, 16601, 16993, 17184, 17773, 18004, 18015, 18018, 18020, 18026, 18030, 18033, 18043, 18053, 18057, 18061, 18067, 18076, 18077, 18078, 18081, 18084, 18101, 18110, 18111, 18113, 18245, 18789, 18802, 19000, 19082, 19091, 19225, 19229, 19443, 19551, 19910, 19999, 20000, 20100, 20256, 20600, 20800, 20880, 21001, 21025, 21083, 21116, 21256, 21262, 21269, 21284, 21288, 21289, 21291, 21296, 21298, 21316, 21322, 21326, 21327, 21374, 21379, 21473, 21500, 22082, 22206, 22222, 22319, 22408, 22556, 22702, 22705, 22954, 23084, 23186, 23456, 23536, 23630, 24082, 24339, 25001, 25025, 25105, 25565, 25782, 26398, 27015, 27017, 27750, 28015, 28017, 28080, 28982, 30009, 30023, 30027, 30083, 30106, 30111, 30121, 30448, 30473, 30479, 31001, 31229, 31443, 31444, 32080, 32101, 32139, 32764, 32832, 33060, 33118, 33357, 33781, 34313, 34500, 35000, 35004, 35522, 35559, 36310, 36982, 37777, 40320, 40484, 41376, 41800, 42250, 42424, 43009, 43046, 44158, 44305, 44336, 44365, 45000, 45111, 45494, 46001, 47256, 48001, 48020, 48039, 48889, 49152, 49210, 49682, 49686, 49688, 50000, 50002, 50004, 50005, 50014, 50073, 50085, 50113, 50500, 50785, 50803, 50805, 50996, 51191, 51235, 51246, 51434, 52200, 52311, 52463, 53419, 53805, 53878, 54138, 54545, 55000, 55470, 55475, 55503, 55550, 55553, 55554, 55555, 55758, 57040, 57603, 57630, 57736, 57786, 58297, 58443, 59163, 60000
- Tags: database
- CPEs: cpe:/a:openssl:openssl:3.0.13, cpe:/a:mongodb:mongodb:8.0.32, cpe:/a:mariadb:mariadb:13.0.2-MariaDB-ubu2604
- ts_added
- 2026-11-03 17:32:02.354000
- ts_last_update
- 2026-11-10 17:32:10.399000
Warden event timeline
DShield event timeline
Presence on blacklists

