Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
196.251.114.29 -- SC 31019102
+ 49439 DShield reports
+ 26 OTX pulses 		0.978 6 blacklists Scanner  22scanner 2025-02-13 17:35:47 2025-04-15 15:55:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.135.193.100 -- DE 9782114
+ 260363 DShield reports
+ 6 OTX pulses 		0.975 9 blacklists Scanner  22scanner 2025-03-10 19:22:44 2025-04-15 15:24:37
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
156.229.232.196 -- AS60223
US 809751
+ 29193 DShield reports 		0.969 2 blacklists Scanner 2025-03-31 15:24:10 2025-04-15 15:58:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.35 -- AS207566
HK 4790102
+ 1962392 DShield reports
+ 43 OTX pulses 		0.969 7 blacklists Login attempts Scanner  22, 135, 445, 5985 2025-01-30 11:17:12 2025-04-15 15:55:08
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.57.45 -- AS207566
HK 17420154
+ 96660 DShield reports
+ 2 OTX pulses 		0.967 13 blacklists Scanner 2025-03-13 14:17:21 2025-04-15 15:57:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
83.222.190.254 -- AS204428
AS212283
BG 710751
+ 186876 DShield reports
+ 5 OTX pulses 		0.948 8 blacklists Scanner  22 2025-03-24 00:59:19 2025-04-15 15:58:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.87.42 -- SC 33674123
+ 123617 DShield reports
+ 1 OTX pulses 		0.940 13 blacklists Scanner  22, 443scanner 2025-02-14 01:46:12 2025-04-15 15:59:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
83.222.191.150 -- AS204428
AS212283
BG 1330841
+ 259239 DShield reports 		0.937 5 blacklists Scanner 2025-03-08 08:25:55 2025-04-15 15:55:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
83.222.191.182 -- AS204428
AS212283
BG 1443541
+ 402458 DShield reports 		0.937 5 blacklists Scanner  22 2025-03-13 05:00:21 2025-04-15 15:56:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.69.116 -- SC 33064123
+ 126827 DShield reports
+ 1 OTX pulses 		0.936 12 blacklists Scanner  22, 443scanner 2025-02-13 22:32:35 2025-04-15 15:57:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.148.190.150 ip-190-150.4vendeta.com AS50360
BG 2145252
+ 550091 DShield reports 		0.935 3 blacklists IP in hostname Scanner  22scanner 2024-03-03 22:15:57 2025-04-15 15:55:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.165.191.27 red.census.shodan.io AS174
SC 50040125
+ 122498 DShield reports
+ 4 OTX pulses 		0.935 13 blacklists Scanner Research scanner Whitelisted  22, 500, 4500, 9002vpn, scanner 2024-03-29 22:25:35 2025-04-15 15:58:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
115.231.78.11 -- AS58461
CN 38401102
+ 343437 DShield reports 		0.934 10 blacklists Scanner 2024-10-24 01:37:09 2025-04-15 15:56:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.87.35 -- SC 33748133
+ 134921 DShield reports
+ 1 OTX pulses 		0.933 12 blacklists Scanner  22, 443scanner 2025-02-14 00:24:28 2025-04-15 15:57:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
89.248.172.16 house.census.shodan.io NL 50025124
+ 83410 DShield reports
+ 5 OTX pulses 		0.932 12 blacklists Scanner Research scanner Whitelisted  22, 500, 4500, 9002vpn, scanner 2016-07-11 15:57:54 2025-04-15 15:58:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
93.174.95.106 battery.census.shodan.io AS202425
NL 50241124
+ 111722 DShield reports
+ 2 OTX pulses 		0.931 12 blacklists Research scanner Scanner Whitelisted  22, 111, 9002scanner 2019-06-14 03:10:47 2025-04-15 15:58:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.153 -- AS214295
IR 2267053
+ 26113 DShield reports 		0.931 10 blacklists Scanner  22scanner 2025-02-14 05:01:26 2025-04-15 15:59:05
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.91.127.81 tube-hosting.com AS49581
DE 2117562
+ 2035602 DShield reports
+ 4 OTX pulses 		0.931 7 blacklists Scanner  22, 8080, 9999, 12345scanner 2024-12-13 21:16:25 2025-04-15 15:58:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
57.128.230.106 b6.scanner.modat.io AS16276
PL 2143252
+ 350415 DShield reports
+ 2 OTX pulses 		0.931 5 blacklists Scanner 2025-03-07 19:40:47 2025-04-15 15:58:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
154.197.56.163 -- AS135377
SC 3930104
+ 81310 DShield reports 		0.930 9 blacklists Scanner  22, 6000, 6001proxy, scanner 2025-02-20 03:47:47 2025-04-15 14:58:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield