Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.148.10.121 -- AS48090
NL 13075144
+ 283576 DShield reports 		1.000 11 blacklists Scanner Login attempts  22, 5901, 5902, 5904, 5906, ... 2025-12-06 02:39:49 2026-01-06 16:09:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 57694132
+ 1323770 DShield reports 		0.999 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2026-01-06 16:11:12
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 13561132
+ 1761029 DShield reports 		0.998 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2026-01-06 16:08:53
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 10999173
+ 51555 DShield reports 		0.995 15 blacklists Scanner Login attempts  22scanner 2025-11-18 16:26:32 2026-01-06 15:56:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 22754174
+ 150010 DShield reports 		0.986 16 blacklists Scanner Login attempts 2025-06-06 07:38:19 2026-01-06 16:11:12
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 8492174
+ 55408 DShield reports 		0.985 15 blacklists Scanner Login attempts 2025-11-18 16:25:46 2026-01-06 16:07:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 9268163
+ 143193 DShield reports 		0.977 15 blacklists Scanner Login attempts 2025-04-16 06:10:40 2026-01-06 15:52:17
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
147.182.247.10 hashbrown.scanf.shodan.io AS14061
US 19994105
+ 146557 DShield reports 		0.976 9 blacklists Research scanner Whitelisted Scanner  22, 4500, 9002cloud, vpn 2023-08-09 05:04:03 2026-01-06 16:13:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.149.252 drive.census.shodan.io AS14061
US 22349135
+ 150153 DShield reports 		0.974 8 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-09-22 02:19:49 2026-01-06 16:10:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.238.87 can.census.shodan.io AS14061
US 26126125
+ 141387 DShield reports 		0.971 8 blacklists Whitelisted Research scanner Scanner  22, 4500, 9002vpn, cloud 2025-08-29 20:19:07 2026-01-06 16:09:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.128.112.74 ip-112-74.4vendeta.com AS202325
AS208637
BG 7360144
+ 190368 DShield reports 		0.970 9 blacklists IP in hostname Login attempts Scanner  22scanner 2025-05-28 12:16:17 2026-01-06 15:53:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.225.197 floss.census.shodan.io AS14061
US 25971125
+ 140489 DShield reports 		0.970 8 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-08-29 20:19:28 2026-01-06 16:13:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
24.199.126.56 resort.census.shodan.io AS14061
US 22545105
+ 149852 DShield reports 		0.970 9 blacklists Whitelisted Research scanner Scanner  22, 4500, 9002cloud, vpn 2025-09-22 03:24:15 2026-01-06 16:11:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
137.184.32.56 lava.census.shodan.io AS14061
US 23455115
+ 148679 DShield reports 		0.970 9 blacklists Scanner Research scanner Whitelisted  22, 4500cloud, vpn 2025-09-19 04:48:29 2026-01-06 16:13:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.153.30 adeptus.census.shodan.io AS14061
US 22405115
+ 147684 DShield reports 		0.970 9 blacklists Scanner Research scanner Whitelisted  22, 9002cloud 2025-09-20 14:47:12 2026-01-06 16:10:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
46.151.182.230 -- AS214967
NL 42981143
+ 65678 DShield reports
+ 1 OTX pulses 		0.969 15 blacklists 2025-12-23 19:36:10 2026-01-06 16:12:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
209.38.70.156 garden.census.shodan.io AS14061
US 21408125
+ 148027 DShield reports 		0.969 8 blacklists Whitelisted Research scanner Scanner  22, 500, 4500, 9002cloud, vpn 2025-09-22 02:21:28 2026-01-06 16:13:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.105.134.95 -- AS42237
IM 455052
+ 781861 DShield reports 		0.969 2 blacklists Login attempts  3389eol-os, self-signed 2022-03-10 07:40:53 2026-01-06 15:34:05
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.150.150 deimos.census.shodan.io AS14061
US 24005115
+ 147383 DShield reports 		0.969 9 blacklists Whitelisted Research scanner Scanner  22, 9002cloud 2025-09-22 03:27:28 2026-01-06 16:10:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.5 -- AS174
US 33144125
+ 211700 DShield reports 		0.968 11 blacklists Scanner  22, 500, 9002vpn 2022-12-10 20:58:44 2026-01-06 16:11:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield