Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
2.57.121.112 dns112.personaliseplus.com AS47890
RO 16212153
+ 287894 DShield reports 		0.999 12 blacklists IP in hostname Login attempts Scanner  3389eol-os, self-signed 2025-10-04 21:56:26 2026-01-12 01:54:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 62724132
+ 1412576 DShield reports 		0.997 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2026-01-12 02:06:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.159 -- AS208137
DE 2902123
+ 32619 DShield reports 		0.996 10 blacklists Login attempts  80, 8080 2025-12-30 18:59:58 2026-01-12 02:01:25
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.148.10.121 -- AS48090
NL 15940144
+ 332619 DShield reports 		0.996 11 blacklists Scanner Login attempts  22scanner 2025-12-06 02:39:49 2026-01-12 02:03:52
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 12612173
+ 58190 DShield reports 		0.990 15 blacklists Scanner Login attempts  22scanner 2025-11-18 16:26:32 2026-01-12 02:02:07
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 22356163
+ 153937 DShield reports 		0.985 16 blacklists Scanner Login attempts 2025-06-06 07:38:19 2026-01-12 02:03:52
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 9483174
+ 62163 DShield reports 		0.981 15 blacklists Scanner Login attempts 2025-11-18 16:25:46 2026-01-12 02:03:52
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
130.12.180.51 -- AS214943
US 1295113
+ 13865 DShield reports 		0.974 5 blacklists Malware Login attempts 2025-12-20 07:34:46 2026-01-11 23:00:47
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.165 -- AS48090
AS47890
RO 5893153
+ 98059 DShield reports 		0.972 15 blacklists Scanner Login attempts 2025-11-19 14:33:11 2026-01-12 01:16:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.153.30 adeptus.census.shodan.io AS14061
US 23503105
+ 150312 DShield reports 		0.969 10 blacklists Scanner Research scanner Whitelisted  22, 9002cloud 2025-09-20 14:47:12 2026-01-12 02:06:17
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 9981173
+ 150413 DShield reports 		0.969 16 blacklists Scanner Login attempts 2025-04-16 06:10:40 2026-01-12 01:53:31
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.238.87 can.census.shodan.io AS14061
US 27407125
+ 143200 DShield reports 		0.969 8 blacklists Whitelisted Research scanner Scanner  22, 9002cloud 2025-08-29 20:19:07 2026-01-12 01:52:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.110.239.2 buffet.census.shodan.io AS14061
US 26981115
+ 141941 DShield reports 		0.967 10 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-08-29 20:37:23 2026-01-12 02:00:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.5 -- AS174
US 34079115
+ 215435 DShield reports 		0.966 11 blacklists Scanner  22, 500, 9002vpn 2022-12-10 20:58:44 2026-01-12 01:56:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.225.197 floss.census.shodan.io AS14061
US 27182125
+ 141644 DShield reports 		0.966 8 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-08-29 20:19:28 2026-01-12 01:58:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.25 hosting25.tronicsat.com AS47890
RO 9998153
+ 180619 DShield reports 		0.966 10 blacklists IP in hostname Login attempts Scanner 2025-10-05 10:37:13 2026-01-12 02:01:25
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 13411142
+ 1649826 DShield reports 		0.964 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2026-01-12 02:00:22
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.151 -- AS57523
HK 8245112
+ 51998 DShield reports 		0.964 5 blacklists Login attempts 2025-12-15 14:17:05 2026-01-12 02:04:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.25 -- AS174
US 32459105
+ 217695 DShield reports 		0.964 11 blacklists Scanner  22, 123, 9002 2025-04-17 23:19:22 2026-01-12 01:59:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.149.252 drive.census.shodan.io AS14061
US 23414125
+ 152619 DShield reports 		0.964 8 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-09-22 02:19:49 2026-01-12 02:03:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield