Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.148.10.121 -- AS48090
NL 28136164
+ 468694 DShield reports
+ 1 OTX pulses 		0.999 14 blacklists Scanner Login attempts 2025-12-06 02:39:49 2026-02-03 01:52:43
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 90644142
+ 1746647 DShield reports 		0.998 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2026-02-03 01:57:46
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.120.22.52 -- AS198953
RU 2386122
+ 92792 DShield reports
+ 2 OTX pulses 		0.997 6 blacklists Login attempts Scanner 2026-01-16 11:03:58 2026-02-03 01:54:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.159 -- AS208137
DE 8121133
+ 74626 DShield reports 		0.996 12 blacklists Login attempts  80, 8080 2025-12-30 18:59:58 2026-02-03 01:55:44
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 20235165
+ 461464 DShield reports
+ 2 OTX pulses 		0.987 17 blacklists Scanner Login attempts  22scanner 2025-05-10 13:46:54 2026-02-02 21:09:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 13305173
+ 171227 DShield reports
+ 2 OTX pulses 		0.983 16 blacklists Scanner Login attempts 2025-04-16 06:10:40 2026-02-03 01:26:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.133.154 hostedby.privatelayer.com AS51852
CH 19401112
+ 78312 DShield reports 		0.983 1 blacklist Login attempts  135, 137, 445, 10000, 10006, ... 2025-09-02 11:59:39 2026-02-03 01:30:47
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.158 -- AS208137
DE 7480115
+ 89962 DShield reports 		0.981 15 blacklists Scanner Login attempts  22scanner 2025-12-29 18:58:08 2026-02-02 21:33:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.72 -- AS48090
AS47890
US 2866132
+ 391262 DShield reports
+ 126 OTX pulses 		0.979 15 blacklists Scanner Login attempts  22scanner 2025-01-05 11:23:47 2026-02-03 01:56:55
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.171 -- AS48090
AS47890
RO 3051133
+ 226475 DShield reports
+ 1 OTX pulses 		0.975 14 blacklists Scanner Login attempts  22 2025-11-19 15:20:59 2026-02-03 01:54:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.56 -- AS48090
AS47890
US 3049133
+ 374323 DShield reports
+ 1 OTX pulses 		0.971 13 blacklists Scanner Login attempts  22scanner 2025-06-06 22:18:48 2026-02-03 01:56:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.65.148.29 176.65.148.29.ptr.pfcloud.network AS51396
NL 575551
+ 149437 DShield reports 		0.965 3 blacklists IP in hostname Scanner 2026-01-08 22:28:08 2026-02-03 01:58:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
5.61.209.92 -- AS206264
SC 1050162
+ 78033 DShield reports
+ 1 OTX pulses 		0.962 7 blacklists Scanner 2026-01-14 10:09:40 2026-02-03 01:56:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.76 -- AS48090
AS47890
US 3112133
+ 7664 DShield reports 		0.960 14 blacklists Scanner Login attempts  22scanner 2025-11-30 15:21:07 2026-02-02 20:12:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 4977452
+ 169851 DShield reports
+ 3 OTX pulses 		0.960 9 blacklists Scanner  80, 8080eol-product, scanner 2024-01-13 21:03:17 2026-02-03 01:57:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.122.238 -- AS48090
AS47890
RO 1127104
+ 184226 DShield reports 		0.958 16 blacklists Scanner Login attempts  22, 80scanner 2025-11-06 15:20:09 2026-02-03 01:37:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
147.139.164.196 -- AS45102
ID 2421103
+ 10697 DShield reports 		0.957 5 blacklists Scanner Login attempts  21, 22, 80, 443, 3306self-signed, cloud, database, eol-product 2024-10-17 09:08:32 2026-02-02 23:05:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.3 -- AS174
US 3909495
+ 220365 DShield reports 		0.955 11 blacklists Scanner  22, 500, 4500, 9002vpn 2022-12-08 21:05:49 2026-02-03 01:57:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.5 -- AS174
US 39722115
+ 228319 DShield reports 		0.954 11 blacklists Scanner  22, 500, 4500, 9002vpn 2022-12-10 20:58:44 2026-02-03 01:57:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 15269184
+ 75710 DShield reports 		0.952 15 blacklists Scanner Login attempts 2025-11-18 16:26:32 2026-02-03 01:52:43
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield