IP address
Shodan(more info)

Passive DNS

- IP blacklists
- Warden events (131)
- 2026-11-04
-
- ReconScanning (node.ce2b59): 48
- ReconScanning (node.4dc198): 12
- ReconScanning (node.9c1411): 45
- 2026-11-03
-
- ReconScanning (node.ce2b59): 16
- ReconScanning (node.9c1411): 10
Threat categories
| TL | Role | Category | Details |
|---|---|---|---|
| 50 | src | scan | port: 21, 22, 23, 3389, 5432 |
| 25 | src | — |
- Origin AS
- AS400940 - RAILWAY
- BGP Prefix
- 66.33.22.0/23
- geo
- United States
- 🕑 America/Chicago
- hostname
- (null)
- Address block ('inetnum' or 'NetRange' in whois database)
- 66.33.22.0 - 66.33.23.255
- last_activity
- 2026-11-04 22:12:26
- last_warden_event
- 2026-11-04 22:12:26
- rep
- 0.08718331418290537
- reserved_range
- 0
- Shodan's InternetDB
- Open ports: 22, 80, 443, 2226, 10001, 10002, 10007, 10011, 10013, 10014, 10019, 10024, 10026, 10027, 10029, 10031, 10033, 10036, 10037, 10043, 10049, 10066, 10075, 10082, 10084, 10090, 10134, 10256, 10283, 10380, 10444, 10445, 10892, 10909, 10911, 10934, 11000, 11065, 11111, 11112, 11210, 11211, 11288, 11300, 11371, 11434, 11443, 11480, 11596, 12084, 12125, 12126, 12134, 12144, 12146, 12150, 12154, 12160, 12162, 12164, 12180, 12184, 12188, 12192, 12202, 12203, 12204, 12209, 12216, 12222, 12224, 12230, 12232, 12239, 12240, 12245, 12257, 12262, 12266, 12272, 12273, 12275, 12276, 12297, 12298, 12313, 12315, 12326, 12328, 12329, 12332, 12333, 12344, 12353, 12358, 12362, 12367, 12373, 12388, 12393, 12394, 12395, 12402, 12405, 12432, 12443, 12444, 12445, 12455, 12469, 12470, 12472, 12474, 12477, 12486, 12488, 12505, 12513, 12518, 12526, 12527, 12541, 12543, 12552, 12564, 12568, 12572, 12578, 12582, 12584, 12585, 12870, 13128, 13228, 14147, 14265, 14403, 14523, 14524, 14609, 14825, 14880, 14897, 14900, 15006, 15082, 15084, 15503, 15673, 16000, 16002, 16005, 16018, 16025, 16027, 16030, 16034, 16044, 16046, 16050, 16053, 16054, 16056, 16060, 16066, 16084, 16086, 16087, 16088, 16095, 16099, 16224, 16403, 16404, 16993, 17103, 17771, 18004, 18007, 18014, 18027, 18028, 18031, 18033, 18039, 18051, 18053, 18056, 18069, 18079, 18081, 18093, 18096, 18113, 18137, 18245, 19000, 19013, 19082, 19084, 19222, 19443, 19732, 20000, 20001, 20182, 20200, 20256, 20440, 20443, 20590, 20880, 21001, 21025, 21081, 21200, 21230, 21243, 21266, 21275, 21292, 21297, 21306, 21317, 21324, 21500, 22022, 22082, 22403, 22556, 23082, 24016, 24656, 24939, 25001, 25003, 25006, 25082, 25105, 25662, 25665, 25952, 26908, 26935, 27015, 27017, 27509, 28001, 28015, 28017, 28391, 28443, 28831, 29511, 29794, 29799, 30000, 30003, 30005, 30015, 30019, 30023, 30111, 30123, 30443, 30634, 30730, 31017, 31337, 31345, 32414, 32443, 32444, 32576, 32764, 33274, 33344, 33393, 33599, 34497, 34658, 35000, 35004, 36501, 36983, 37443, 38432, 38781, 38880, 39511, 40000, 41617, 42420, 42560, 43181, 43277, 44158, 44263, 44306, 44334, 44341, 44399, 45001, 45465, 45786, 45788, 47984, 48012, 49080, 49610, 50000, 50003, 50004, 50006, 50013, 50073, 50113, 50122, 50202, 51004, 51106, 51201, 51434, 52010, 52311, 52706, 53482, 53743, 54022, 54138, 54309, 54327, 54358, 54404, 55000, 55055, 55443, 55475, 55550, 55554, 55555, 56504, 57778, 57780, 57782, 57785, 58000, 59364, 60000
- Tags: database
- CPEs: cpe:/a:openssl:openssl:3.0.2, cpe:/a:mongodb:mongodb:7.0.18
- ts_added
- 2026-11-03 17:32:03.012000
- ts_last_update
- 2026-11-09 17:32:10.747000
Warden event timeline
DShield event timeline
Presence on blacklists

