Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.135.232.24 -- AS198953
RU 86294132
+ 1812112 DShield reports
+ 1 OTX pulses 		0.996 4 blacklists Login attempts  135, 137, 5985 2025-05-10 14:41:19 2025-08-28 19:01:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.114.29 -- SC 44837152
+ 56937 DShield reports
+ 114 OTX pulses 		0.990 7 blacklists Scanner  22 2025-02-13 17:35:47 2025-08-28 19:00:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.112 -- AS204428
RO 18450133
+ 319144 DShield reports 		0.977 12 blacklists Login attempts  3389self-signed, eol-os 2025-01-24 18:40:13 2025-08-28 19:00:08
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.217 hostingmailto131.statics.servermail.org AS47890
RO 3234112
+ 48488 DShield reports 		0.977 14 blacklists Scanner Login attempts  22scanner 2025-06-26 14:12:19 2025-08-28 19:00:08
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6274153
+ 50130 DShield reports 		0.976 4 blacklists Scanner  80scanner 2025-04-23 18:49:59 2025-08-28 07:42:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.99 hostingmailto251.statics.servermail.org AS47890
RO 1880102
+ 19449 DShield reports 		0.975 12 blacklists Login attempts 2025-08-12 03:05:22 2025-08-28 18:50:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.20 hostingmailto112.statics.servermail.org AS47890
RO 194592
+ 20095 DShield reports 		0.975 12 blacklists Login attempts 2025-08-12 03:11:10 2025-08-28 18:50:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.159 hostingmailto066.statics.servermail.org AS47890
RO 1749102
+ 18070 DShield reports 		0.975 12 blacklists Login attempts 2025-08-13 06:16:33 2025-08-28 19:00:08
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.93.233 -- AS47890
RO 254292
+ 28619 DShield reports 		0.974 11 blacklists Login attempts Scanner 2025-08-06 06:58:15 2025-08-28 18:33:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.26 -- AS198953
RU 18140142
+ 2507943 DShield reports 		0.973 6 blacklists Login attempts Scanner  137, 445, 5985 2025-05-11 17:06:38 2025-08-28 18:44:53
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.93.119 -- AS47890
RO 251592
+ 28923 DShield reports 		0.973 11 blacklists Login attempts Scanner 2025-08-06 02:29:08 2025-08-28 18:57:31
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.21 -- AS214295
IR 4680132
+ 76497 DShield reports
+ 108 OTX pulses 		0.964 4 blacklists Login attempts  22, 111 2025-04-04 20:42:12 2025-08-27 17:18:55
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
195.178.110.133 -- AS48090
BG 2638134
+ 29315 DShield reports 		0.957 11 blacklists Scanner Login attempts  22scanner 2025-07-15 13:02:36 2025-08-28 17:25:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
195.178.110.224 -- AS48090
BG 4201144
+ 39643 DShield reports 		0.956 12 blacklists Scanner Login attempts  22scanner 2025-07-09 15:12:36 2025-08-28 17:56:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.71 -- AS48090
AS47890
US 11721124
+ 96862 DShield reports
+ 6 OTX pulses 		0.954 12 blacklists Scanner Login attempts  22scanner 2025-01-05 11:28:19 2025-08-28 16:51:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
94.102.49.155 no-reverse-dns-configured.com AS202425
NL 5878265
+ 8359 DShield reports
+ 12 OTX pulses 		0.951 8 blacklists Scanner  80scanner 2024-12-17 12:08:16 2025-08-28 18:11:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
139.162.186.99 139-162-186-99.ip.linodeusercontent.com AS63949
DE 17170184
+ 39446 DShield reports 		0.947 11 blacklists IP in hostname Scanner  22, 8126cloud 2025-04-12 02:01:32 2025-08-28 19:00:13
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
204.76.203.28 hosted-by.pfcloud.io AS51396
NL 423884
+ 55108 DShield reports 		0.945 12 blacklists Scanner 2025-08-12 21:24:06 2025-08-28 19:00:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.15 -- AS204428
RO 30455164
+ 587802 DShield reports 		0.945 13 blacklists Login attempts Scanner  22, 80, 2000eol-product, scanner 2025-04-10 19:31:55 2025-08-28 19:02:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
93.123.109.185 -- AS48090
AS401116
BG 2399154
+ 27768 DShield reports 		0.942 10 blacklists Scanner Login attempts  22scanner 2025-07-09 15:19:19 2025-08-28 16:18:16
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield