Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
196.251.114.29 -- SC 44245152
+ 59310 DShield reports
+ 117 OTX pulses 		0.994 7 blacklists Scanner  22 2025-02-13 17:35:47 2025-09-17 20:21:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.135.232.24 -- AS198953
RU 91154132
+ 1878197 DShield reports
+ 1 OTX pulses 		0.993 4 blacklists Login attempts  135, 137, 5985 2025-05-10 14:41:19 2025-09-17 20:20:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.26 -- AS198953
RU 18093142
+ 2548389 DShield reports 		0.992 6 blacklists Login attempts Scanner  135, 137, 445, 5985 2025-05-11 17:06:38 2025-09-17 20:14:03
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 15096175
+ 855887 DShield reports
+ 1 OTX pulses 		0.990 14 blacklists Scanner Login attempts  22scanner 2025-05-10 13:46:54 2025-09-17 20:24:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 7348163
+ 57309 DShield reports 		0.990 4 blacklists Scanner  22, 80scanner 2025-04-23 18:49:59 2025-09-17 06:39:04
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 4182144
+ 188181 DShield reports 		0.989 7 blacklists Login attempts  135, 137, 139, 445, 3306, ...database 2024-10-29 11:05:11 2025-09-17 19:58:44
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.15 -- AS204428
RO 31217154
+ 637121 DShield reports 		0.985 14 blacklists Login attempts Scanner  22, 80, 2000scanner, eol-product 2025-04-10 19:31:55 2025-09-17 20:24:22
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.112 -- AS204428
RO 19574123
+ 393277 DShield reports 		0.984 13 blacklists Login attempts  3389self-signed, eol-os 2025-01-24 18:40:13 2025-09-17 20:20:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
195.178.110.133 -- AS48090
BG 4064134
+ 44696 DShield reports 		0.977 11 blacklists Scanner Login attempts  22scanner 2025-07-15 13:02:36 2025-09-17 19:14:07
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.32.195.85 -- AS197834
AM 34409257
+ 64622 DShield reports
+ 7 OTX pulses 		0.973 14 blacklists Scanner 2025-06-19 14:22:43 2025-09-17 20:23:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
94.102.49.155 no-reverse-dns-configured.com AS202425
NL 6201255
+ 9248 DShield reports
+ 11 OTX pulses 		0.969 8 blacklists Scanner  80scanner 2024-12-17 12:08:16 2025-09-17 19:18:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.83 hostingmailto236.statics.servermail.org AS47890
RO 382452
+ 65298 DShield reports 		0.966 4 blacklists Scanner 2025-08-17 17:41:30 2025-09-17 20:22:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.82.77.202 rnd.group-ib.com AS202425
NL 54888153
+ 262269 DShield reports
+ 9 OTX pulses 		0.962 16 blacklists Scanner  80 2023-08-17 16:11:05 2025-09-17 20:22:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.124 security.criminalip.com AS202425
US 186552
+ 1853 DShield reports 		0.962 1 blacklist Whitelisted Research scanner Scanner 2025-08-11 11:17:38 2025-09-17 20:21:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
86.42.232.244 86-42-232-244-dynamic.agg1.srd.blp-srl.eircom.net AS5466
IE 202452
+ 566 DShield reports 		0.960 4 blacklists IP in hostname Dynamic IP Scanner 2025-02-11 08:57:05 2025-09-17 15:46:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.106 security.criminalip.com AS202425
US 180452
+ 9288 DShield reports 		0.959 2 blacklists Whitelisted Research scanner Scanner 2025-08-11 12:14:27 2025-09-17 19:15:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.148.10.240 -- AS48090
NL 6899184
+ 71669 DShield reports 		0.959 10 blacklists Scanner Login attempts  22, 80open-dir, scanner 2024-09-17 10:11:51 2025-09-17 20:22:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.84.225 undefined.hostname.localhost SC 31765144
+ 1407268 DShield reports 		0.958 10 blacklists Login attempts Scanner  22 2025-02-13 20:22:21 2025-09-17 20:22:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
139.19.117.130 inet-research-scan-6.mpi-inf.mpg.de AS680
DE 9360113
+ 37034 DShield reports
+ 118 OTX pulses 		0.955 4 blacklists Scanner Login attempts  80, 443, 4949eol-product 2024-04-04 20:27:03 2025-09-17 20:22:47
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
139.19.117.129 inet-research-scan-5.mpi-inf.mpg.de AS680
DE 836673
+ 37487 DShield reports
+ 1 OTX pulses 		0.953 5 blacklists Scanner Login attempts  80, 443, 4949eol-product 2024-04-04 20:24:00 2025-09-17 20:03:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield