IP address


.000199.21.149.66
Shodan(more info)
Passive DNS
Tags: Scanner
IP blacklists
AbuseIPDB
199.21.149.66 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc.<br>Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-10-08 04:00:00.844000
Was present on blacklist at: 2025-08-31 04:00, 2025-09-01 04:00, 2025-09-08 04:00, 2025-09-09 04:00, 2025-09-10 04:00, 2025-09-29 04:00, 2025-09-30 04:00, 2025-10-01 04:00, 2025-10-02 04:00, 2025-10-06 04:00, 2025-10-08 04:00
Turris greylist
199.21.149.66 is listed on the Turris greylist blacklist.

Description: Greylist is the output of the Turris research project by CZ.NIC,<br>which collects data of malicious IPs.
Type of feed: primary (feed detail page)

Last checked at: 2025-10-09 21:15:00.237000
Was present on blacklist at: 2025-08-31 21:15, 2025-09-01 21:15, 2025-09-16 21:15, 2025-09-28 21:15, 2025-09-30 21:15, 2025-10-01 21:15, 2025-10-02 21:15, 2025-10-03 21:15, 2025-10-05 21:15, 2025-10-06 21:15, 2025-10-07 21:15, 2025-10-09 21:15
CI Army
199.21.149.66 is listed on the CI Army blacklist.

Description: Collective Intelligence Network Security is a Threat Intelligence<br>database that provides scores for IPs. Source of unspecified malicious attacks<br>most of them will be active attackers/scanners
Type of feed: primary (feed detail page)

Last checked at: 2025-09-30 02:50:00.992000
Was present on blacklist at: 2025-09-26 02:50, 2025-09-27 02:50, 2025-09-28 02:50, 2025-09-29 02:50, 2025-09-30 02:50
Warden events (142)
2025-09-28
ReconScanning (node.f90c6b): 1
2025-09-27
ReconScanning (node.f90c6b): 8
2025-09-26
ReconScanning (node.f90c6b): 25
2025-09-25
ReconScanning (node.f90c6b): 34
2025-09-24
ReconScanning (node.f90c6b): 10
2025-09-23
ReconScanning (node.86eb21): 7
2025-09-22
ReconScanning (node.86eb21): 37
2025-09-21
ReconScanning (node.86eb21): 20
DShield reports (IP summary, reports)
2025-08-29
Number of reports: 8296
Distinct targets: 4865
2025-08-30
Number of reports: 10885
Distinct targets: 6341
2025-08-31
Number of reports: 10426
Distinct targets: 6097
2025-09-01
Number of reports: 3792
Distinct targets: 2166
2025-09-02
Number of reports: 784
Distinct targets: 784
2025-09-03
Number of reports: 2903
Distinct targets: 2337
2025-09-07
Number of reports: 7598
Distinct targets: 4293
2025-09-08
Number of reports: 10583
Distinct targets: 6160
2025-09-09
Number of reports: 7531
Distinct targets: 4232
2025-09-10
Number of reports: 4357
Distinct targets: 2488
2025-09-13
Number of reports: 217
Distinct targets: 217
2025-09-14
Number of reports: 1973
Distinct targets: 1664
2025-09-15
Number of reports: 829
Distinct targets: 829
2025-09-28
Number of reports: 1040
Distinct targets: 587
2025-09-29
Number of reports: 1040
Distinct targets: 587
2025-09-30
Number of reports: 2004
Distinct targets: 2001
2025-10-03
Number of reports: 3611
Distinct targets: 2140
2025-10-04
Number of reports: 2427
Distinct targets: 1415
2025-10-05
Number of reports: 2427
Distinct targets: 1415
2025-10-06
Number of reports: 1514
Distinct targets: 1514
2025-10-07
Number of reports: 1017
Distinct targets: 1017
2025-10-08
Number of reports: 1017
Distinct targets: 1017
2025-10-15
Number of reports: 1005
Distinct targets: 656
Origin AS
AS7040 - NETMINDERS
BGP Prefix
199.21.149.0/24
geo
Canada
🕑 America/Toronto
hostname
(null)
Address block ('inetnum' or 'NetRange' in whois database)
199.21.148.0 - 199.21.151.255
last_activity
2025-09-28 13:52:40
last_warden_event
2025-09-28 13:52:40
rep
0.0
reserved_range
0
ts_added
2025-08-30 05:04:01.497000
ts_last_update
2025-10-16 05:07:45.018000

Warden event timeline

DShield event timeline

Presence on blacklists