Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
204.76.203.30 204.76.203.30.ptr.pfcloud.network AS51396
NL 21586123
+ 209318 DShield reports
+ 7 OTX pulses 		0.985 12 blacklists Scanner IP in hostname  80scanner, eol-product 2025-10-07 04:23:51 2025-12-01 10:24:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 21704145
+ 769905 DShield reports
+ 1 OTX pulses 		0.973 16 blacklists Scanner Login attempts 2025-05-10 13:46:54 2025-12-01 10:24:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 3602153
+ 18907 DShield reports 		0.970 13 blacklists Scanner Login attempts 2025-11-18 16:26:32 2025-12-01 10:10:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 12963123
+ 245282 DShield reports 		0.970 11 blacklists IP in hostname Login attempts Scanner 2025-10-04 21:56:26 2025-12-01 09:57:52
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 2577452
+ 150562 DShield reports
+ 2 OTX pulses 		0.969 10 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2025-12-01 10:25:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.176 -- AS202306
GB 3565152
+ 176422 DShield reports
+ 4 OTX pulses 		0.968 10 blacklists Scanner  25, 80, 8080eol-product 2024-01-13 21:05:41 2025-12-01 10:25:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 24461154
+ 112005 DShield reports 		0.962 16 blacklists Scanner Login attempts  22scanner 2025-06-06 07:38:19 2025-12-01 10:02:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.234 -- AS215476
DE 547062
+ 596654 DShield reports 		0.962 6 blacklists Scanner  22, 111scanner 2025-10-24 16:31:45 2025-12-01 10:17:16
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.157 -- AS208137
IR 14117123
+ 273845 DShield reports 		0.961 12 blacklists Login attempts Scanner  3389self-signed 2025-09-19 14:03:31 2025-12-01 10:10:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6326143
+ 53280 DShield reports 		0.961 5 blacklists Scanner  22, 80eol-product, scanner 2025-04-23 18:49:59 2025-12-01 07:38:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.52 -- AS215476
DE 777774
+ 169704 DShield reports 		0.958 12 blacklists Scanner  22, 111scanner 2025-09-02 15:51:13 2025-12-01 10:17:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.114 -- AS208137
IR 748763
+ 389393 DShield reports 		0.957 5 blacklists Scanner  22, 111scanner 2025-10-19 04:56:26 2025-12-01 10:17:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
81.22.193.93 www.sc.ed AS212913
RU 591152
+ 12841 DShield reports 		0.956 1 blacklist Scanner  22 2025-11-14 22:31:18 2025-12-01 10:07:41
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 2793143
+ 19307 DShield reports 		0.955 12 blacklists Scanner Login attempts 2025-11-18 16:25:46 2025-12-01 10:05:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.126 -- AS208137
IR 649863
+ 169591 DShield reports 		0.952 5 blacklists Scanner  111scanner 2025-10-20 07:21:07 2025-12-01 10:20:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.142.147.209 -- AS213438
DE 4670685
+ 834992 DShield reports
+ 32 OTX pulses 		0.950 13 blacklists Scanner  22 2025-10-23 03:24:51 2025-12-01 10:24:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 7871144
+ 86685 DShield reports 		0.949 15 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-12-01 09:54:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.55 -- AS208137
IR 382862
+ 239230 DShield reports 		0.949 4 blacklists Scanner  22 2025-11-14 04:33:52 2025-12-01 10:17:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 18187112
+ 478274 DShield reports 		0.948 5 blacklists Login attempts 2025-11-14 08:31:47 2025-12-01 10:15:32
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.235 -- AS215476
DE 425352
+ 371475 DShield reports 		0.945 6 blacklists Scanner 2025-11-09 07:26:47 2025-12-01 10:17:17
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield