Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
176.113.115.137 -- AS49505
AS57678
HK 4529082
+ 91752 DShield reports
+ 32 OTX pulses 		0.976 6 blacklists Scanner  123scanner 2024-12-10 17:35:43 2025-03-25 21:30:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.114.29 -- SC 1896982
+ 32881 DShield reports
+ 14 OTX pulses 		0.969 5 blacklists Scanner  22scanner 2025-02-13 17:35:47 2025-03-25 21:30:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
156.229.232.116 -- AS60223
US 3066661
+ 114422 DShield reports 		0.969 2 blacklists Scanner  22, 80eol-product, scanner 2025-01-27 19:08:34 2025-03-25 21:29:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.189 -- AS207566
HK 316593
+ 172680 DShield reports
+ 43 OTX pulses 		0.957 13 blacklists Login attempts Scanner  22, 4000scanner 2024-11-08 17:08:30 2025-03-25 21:26:41
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.36 -- AS214295
IR 2602124
+ 33555 DShield reports
+ 11 OTX pulses 		0.955 10 blacklists Scanner Login attempts  22, 111scanner 2025-01-11 17:15:06 2025-03-25 16:38:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.35 -- AS207566
HK 319682
+ 1484840 DShield reports
+ 31 OTX pulses 		0.952 7 blacklists Login attempts Scanner  22, 135, 445, 5985 2025-01-30 11:17:12 2025-03-25 21:24:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.82.77.202 rnd.group-ib.com AS202425
NL 47120194
+ 379064 DShield reports
+ 9 OTX pulses 		0.951 17 blacklists Scanner  80, 443scanner 2023-08-17 16:11:05 2025-03-25 21:28:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.188 -- AS207566
HK 303393
+ 172206 DShield reports
+ 51 OTX pulses 		0.951 15 blacklists Login attempts Scanner  22, 80, 4000eol-product, scanner 2024-11-08 17:08:30 2025-03-25 18:51:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.165.191.26 purple.census.shodan.io AS174
SC 45333125
+ 123223 DShield reports
+ 3 OTX pulses 		0.943 14 blacklists Scanner Research scanner Whitelisted  22, 9002scanner 2024-03-29 22:23:20 2025-03-25 21:31:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.35 -- AS214295
IR 1447103
+ 40159 DShield reports
+ 15 OTX pulses 		0.942 10 blacklists Login attempts Scanner  22, 111scanner 2024-12-28 19:06:33 2025-03-25 16:38:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.165.191.27 red.census.shodan.io AS174
SC 45449125
+ 123985 DShield reports
+ 5 OTX pulses 		0.940 14 blacklists Scanner Research scanner Whitelisted  22, 500, 4500, 9002vpn, scanner 2024-03-29 22:25:35 2025-03-25 21:32:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.73 -- AS48090
AS47890
US 11020124
+ 87622 DShield reports
+ 18 OTX pulses 		0.938 11 blacklists Scanner  22scanner 2025-01-05 11:14:56 2025-03-25 21:28:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.88.103 -- ZA 1111693
+ 554508 DShield reports
+ 2 OTX pulses 		0.938 8 blacklists Login attempts Scanner 2025-02-24 18:02:26 2025-03-25 21:30:21
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
89.248.172.16 house.census.shodan.io NL 45218114
+ 84747 DShield reports
+ 5 OTX pulses 		0.937 11 blacklists Scanner Research scanner Whitelisted  22, 9002scanner 2016-07-11 15:57:54 2025-03-25 21:28:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.153 -- AS214295
IR 1246253
+ 15708 DShield reports 		0.934 10 blacklists Scanner  22scanner 2025-02-14 05:01:26 2025-03-25 21:26:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.71 -- AS48090
AS47890
US 8106114
+ 101862 DShield reports
+ 13 OTX pulses 		0.934 11 blacklists Scanner  22 2025-01-05 11:28:19 2025-03-25 21:25:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.142.236.35 wine.census.shodan.io AS174
NL 4406995
+ 91626 DShield reports
+ 4 OTX pulses 		0.934 11 blacklists Whitelisted Research scanner Scanner  22 2024-08-06 18:49:39 2025-03-25 21:32:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.79 -- AS47890
RO 569494
+ 150982 DShield reports
+ 10 OTX pulses 		0.933 13 blacklists Scanner 2024-11-19 08:38:48 2025-03-25 21:30:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.185 -- AS47890
RO 506863
+ 32510 DShield reports
+ 3 OTX pulses 		0.932 8 blacklists Scanner  3389self-signed 2025-02-28 16:15:33 2025-03-25 21:23:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.93.89.118 -- IR 2833113
+ 364823 DShield reports
+ 2 OTX pulses 		0.932 7 blacklists Scanner Login attempts  22scanner 2025-02-08 17:19:39 2025-03-25 16:59:16
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield