Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
85.31.47.40 -- AS401116
NL 24442113
+ 40950 DShield reports
+ 16 OTX pulses 		0.992 6 blacklists Scanner  22scanner 2024-10-01 23:33:51 2024-11-21 06:15:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.82.77.202 rnd.group-ib.com AS202425
NL 51209204
+ 323940 DShield reports
+ 7 OTX pulses 		0.989 17 blacklists Scanner  80, 443scanner 2023-08-17 16:11:05 2024-11-21 06:18:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.234.216.122 -- AS57523
RU 45226113
+ 95051 DShield reports
+ 41 OTX pulses 		0.986 5 blacklists Scanner  22scanner 2024-05-16 11:05:48 2024-11-21 06:20:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
5.101.0.66 -- AS34665
RU 8717175
+ 18093 DShield reports
+ 4 OTX pulses 		0.986 11 blacklists Scanner 2024-10-17 13:22:35 2024-11-21 06:19:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
5.8.11.202 -- AS34665
RU 37288205
+ 149790 DShield reports
+ 11 OTX pulses 		0.985 8 blacklists Scanner  80scanner 2024-03-22 13:24:40 2024-11-21 06:20:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.107 -- AS207566
HK 1093693
+ 697934 DShield reports
+ 35 OTX pulses 		0.984 12 blacklists Login attempts  22, 135, 445, 5985scanner 2024-07-13 00:03:04 2024-11-21 05:02:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.50.16.198 -- AS49870
NL 7502173
+ 226430 DShield reports
+ 11 OTX pulses 		0.983 5 blacklists Scanner 2024-11-07 08:31:08 2024-11-21 06:18:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
85.192.56.68 for-maid.aeza.network AS216246
RU 1007072
+ 457136 DShield reports 		0.983 2 blacklists Login attempts  445 2024-08-05 15:49:27 2024-11-21 06:16:08
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.128.133 -- AS42237
SE 952172
+ 932544 DShield reports 		0.982 1 blacklist Login attempts  135, 137, 445, 5985 2023-08-01 09:26:36 2024-11-21 06:19:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
115.231.78.11 -- AS58461
CN 16335113
+ 160206 DShield reports 		0.973 7 blacklists Scanner 2024-10-24 01:37:09 2024-11-21 06:17:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.253 -- AS207566
HK 563273
+ 593547 DShield reports
+ 35 OTX pulses 		0.972 12 blacklists Login attempts  22, 135, 445, 5985scanner 2024-09-07 17:47:11 2024-11-21 04:25:41
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
95.214.55.79 -- AS201814
PL 1443662
+ 196599 DShield reports 		0.970 5 blacklists Scanner  22, 8000 2024-10-24 16:23:50 2024-11-21 06:16:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
154.213.185.150 -- AS51396
SC 3633471
+ 146944 DShield reports 		0.968 6 blacklists Scanner  22, 80scanner, eol-product 2024-08-04 17:36:36 2024-11-21 06:19:13
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.75.212.9 tube-hosting.com AS49581
DE 2057572
+ 2575782 DShield reports
+ 1 OTX pulses 		0.968 6 blacklists Scanner  22, 8080scanner 2024-09-13 11:58:20 2024-11-20 19:58:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.169.175.106 -- AS211760
AS216419
AS209605
NL 8885114
+ 88326 DShield reports
+ 8 OTX pulses 		0.966 11 blacklists Scanner Login attempts  22 2024-03-10 18:16:30 2024-11-21 06:18:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
93.174.93.12 rnd.group-ib.com AS202425
NL 3567752
+ 107397 DShield reports 		0.965 5 blacklists Scanner  80, 443scanner 2024-07-18 15:27:18 2024-11-21 06:07:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.208.156.160 -- AS42624
SC 1025952
+ 35396 DShield reports 		0.965 5 blacklists Scanner 2024-11-06 21:09:53 2024-11-21 06:19:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.255.85.189 -- AS207566
HK 46472
+ 16841 DShield reports
+ 4 OTX pulses 		0.964 11 blacklists Login attempts 2024-11-08 17:08:30 2024-11-21 05:23:46
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.105.134.95 -- AS42237
IM 454062
+ 924303 DShield reports 		0.964 2 blacklists Login attempts  3389eol-os, self-signed 2022-03-10 07:40:53 2024-11-21 05:33:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
184.105.247.235 scan-14j.shadowserver.org US 1862972
+ 50547 DShield reports
+ 1 OTX pulses 		0.963 4 blacklists Scanner Research scanner Whitelisted  80scanner 2016-07-12 03:29:39 2024-11-21 06:08:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield