IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (120)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 43
- ReconScanning (node.9c1411): 42
- ReconScanning (node.4dc198): 9
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:12:26
- last_warden_event
- 2026-11-04 22:12:26
- rep
- 0.08713955946297891
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 2226, 10004, 10006, 10007, 10016, 10018, 10021, 10024, 10030, 10033, 10034, 10039, 10042, 10068, 10090, 10181, 10393, 10554, 10909, 11001, 11027, 11065, 11112, 11184, 11210, 11211, 11300, 11434, 12000, 12088, 12104, 12106, 12110, 12118, 12123, 12125, 12143, 12144, 12147, 12150, 12155, 12156, 12164, 12198, 12226, 12239, 12244, 12247, 12249, 12253, 12260, 12261, 12268, 12269, 12273, 12275, 12276, 12279, 12281, 12286, 12287, 12299, 12302, 12317, 12323, 12327, 12338, 12355, 12356, 12357, 12358, 12370, 12375, 12385, 12387, 12391, 12401, 12404, 12405, 12409, 12415, 12419, 12427, 12429, 12432, 12434, 12447, 12451, 12456, 12463, 12471, 12472, 12482, 12506, 12512, 12527, 12533, 12539, 12551, 12563, 12564, 12568, 12569, 12575, 12583, 12585, 12586, 12590, 12601, 12615, 13084, 13516, 13920, 14082, 14084, 14147, 14184, 14265, 14404, 14443, 14873, 14905, 15503, 15555, 15673, 15831, 16003, 16010, 16012, 16023, 16030, 16063, 16067, 16083, 16093, 16233, 16403, 16666, 16888, 16992, 16993, 17020, 17084, 17443, 17751, 17770, 17778, 17780, 18000, 18002, 18004, 18005, 18010, 18012, 18015, 18021, 18022, 18023, 18027, 18028, 18031, 18043, 18052, 18059, 18070, 18072, 18073, 18076, 18078, 18079, 18081, 18083, 18086, 18096, 18113, 18182, 18245, 18765, 20000, 20200, 20202, 20512, 20880, 21082, 21231, 21236, 21239, 21240, 21248, 21253, 21263, 21266, 21269, 21277, 21278, 21289, 21290, 21298, 21300, 21302, 21304, 21310, 21313, 21484, 21935, 22022, 22103, 22556, 23064, 23082, 23456, 24084, 24472, 24510, 24726, 24808, 25001, 25565, 25782, 26193, 26653, 27055, 28001, 28015, 28487, 29842, 30000, 30002, 30007, 30110, 30122, 30222, 30501, 31017, 31444, 32028, 32323, 32444, 32526, 32764, 33344, 34081, 34225, 34883, 34962, 35004, 35100, 35240, 36621, 36883, 36984, 37080, 37215, 37741, 37777, 39001, 39408, 40000, 41800, 41921, 41942, 42236, 42628, 42657, 43336, 43408, 43932, 44021, 44158, 44301, 45005, 45010, 45039, 45427, 46000, 46700, 47001, 47073, 47509, 47990, 48001, 48012, 48020, 48757, 49134, 49153, 49190, 49541, 49686, 50000, 50001, 50004, 50005, 50011, 50050, 50070, 50085, 50160, 50274, 50443, 50500, 50996, 50997, 51001, 51106, 51201, 51677, 51939, 52311, 52339, 52610, 53028, 53070, 53805, 53807, 54172, 54227, 54545, 55000, 55350, 55442, 55443, 55470, 55554, 55555, 57087, 57427, 57525, 57786, 58603, 59550
- Tags: proxy, database
- CPEs: cpe:/a:openssl:openssl:3.0.2, cpe:/a:mongodb:mongodb:7.0.26, cpe:/a:openssl:openssl:3.0.13, cpe:/a:mongodb:mongodb:8.0.32
- ts_added
- 2026-11-03 17:31:59.333000
- ts_last_update
- 2026-11-09 17:32:01.371000
Warden event timeline
DShield event timeline
Presence on blacklists

