Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.135.232.24 -- AS198953
RU 84360132
+ 1856907 DShield reports
+ 1 OTX pulses 		0.994 4 blacklists Login attempts  135, 137, 5985 2025-05-10 14:41:19 2025-08-25 14:08:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.114.29 -- SC 45300152
+ 58048 DShield reports
+ 112 OTX pulses 		0.989 7 blacklists Scanner  22 2025-02-13 17:35:47 2025-08-25 14:08:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.88.8.186 -- AS201949
AE 9712114
+ 301829 DShield reports 		0.984 5 blacklists Login attempts 2025-07-30 18:00:32 2025-08-25 14:08:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6165153
+ 50736 DShield reports 		0.979 4 blacklists Scanner  22, 80scanner 2025-04-23 18:49:59 2025-08-25 07:07:04
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.217 hostingmailto131.statics.servermail.org AS47890
RO 283582
+ 46335 DShield reports 		0.974 14 blacklists Scanner Login attempts  22, 80scanner 2025-06-26 14:12:19 2025-08-25 14:11:01
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.20 hostingmailto112.statics.servermail.org AS47890
RO 153082
+ 18037 DShield reports 		0.974 12 blacklists Login attempts 2025-08-12 03:11:10 2025-08-25 13:54:05
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.99 hostingmailto251.statics.servermail.org AS47890
RO 148682
+ 17548 DShield reports 		0.972 12 blacklists Login attempts 2025-08-12 03:05:22 2025-08-25 13:11:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.93.233 -- AS47890
RO 214482
+ 26574 DShield reports 		0.972 11 blacklists Login attempts Scanner 2025-08-06 06:58:15 2025-08-25 14:08:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.93.119 -- AS47890
RO 211582
+ 26800 DShield reports 		0.970 11 blacklists Login attempts Scanner 2025-08-06 02:29:08 2025-08-25 14:06:24
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.65.149.231 hosted-by.pfcloud.io AS51396
NL 10739155
+ 65995 DShield reports 		0.968 13 blacklists Scanner  22, 7001self-signed 2025-07-31 07:26:20 2025-08-25 14:07:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.112 -- AS204428
RO 18037133
+ 327889 DShield reports 		0.968 12 blacklists Login attempts  3389self-signed, eol-os 2025-01-24 18:40:13 2025-08-25 14:03:31
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
195.178.110.224 -- AS48090
BG 4003144
+ 38831 DShield reports 		0.965 12 blacklists Scanner Login attempts  22scanner 2025-07-09 15:12:36 2025-08-25 14:02:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.159 hostingmailto066.statics.servermail.org AS47890
RO 132792
+ 15836 DShield reports 		0.965 12 blacklists Login attempts 2025-08-13 06:16:33 2025-08-25 13:34:22
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.26 -- AS198953
RU 17896142
+ 2562862 DShield reports 		0.964 6 blacklists Login attempts Scanner  137, 445, 5985 2025-05-11 17:06:38 2025-08-25 14:03:31
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.71 -- AS48090
AS47890
US 11271124
+ 95823 DShield reports
+ 6 OTX pulses 		0.962 12 blacklists Scanner Login attempts  22scanner 2025-01-05 11:28:19 2025-08-25 13:26:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.65.148.214 hosted-by.pfcloud.io AS51396
NL 9000124
+ 119429 DShield reports 		0.954 12 blacklists Scanner  22, 80, 123 2025-08-08 07:49:39 2025-08-25 14:10:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.21 -- AS214295
IR 4464122
+ 77431 DShield reports
+ 106 OTX pulses 		0.954 4 blacklists Login attempts  22, 111 2025-04-04 20:42:12 2025-08-25 12:01:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
195.178.110.133 -- AS48090
BG 2413134
+ 28674 DShield reports 		0.944 11 blacklists Scanner Login attempts  22 2025-07-15 13:02:36 2025-08-25 12:37:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
204.76.203.28 hosted-by.pfcloud.io AS51396
NL 380984
+ 49346 DShield reports 		0.943 12 blacklists Scanner 2025-08-12 21:24:06 2025-08-25 14:06:06
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
139.162.186.99 139-162-186-99.ip.linodeusercontent.com AS63949
DE 16830174
+ 39480 DShield reports 		0.942 11 blacklists IP in hostname Scanner  22, 8126cloud 2025-04-12 02:01:32 2025-08-25 14:10:55
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield