Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
204.76.203.30 204.76.203.30.ptr.pfcloud.network AS51396
NL 23390133
+ 218327 DShield reports
+ 7 OTX pulses 		0.985 12 blacklists Scanner IP in hostname  80eol-product, scanner 2025-10-07 04:23:51 2025-12-05 20:28:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.157 -- AS208137
IR 14484133
+ 281402 DShield reports 		0.984 12 blacklists Login attempts Scanner  3389self-signed 2025-09-19 14:03:31 2025-12-05 20:20:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 13663133
+ 259631 DShield reports 		0.984 11 blacklists IP in hostname Login attempts Scanner 2025-10-04 21:56:26 2025-12-05 20:31:17
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 4632163
+ 22573 DShield reports 		0.983 13 blacklists Scanner Login attempts 2025-11-18 16:26:32 2025-12-05 20:40:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 25407164
+ 121964 DShield reports 		0.980 16 blacklists Scanner Login attempts  22scanner 2025-06-06 07:38:19 2025-12-05 20:23:53
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 21769145
+ 762280 DShield reports
+ 1 OTX pulses 		0.975 16 blacklists Scanner Login attempts 2025-05-10 13:46:54 2025-12-05 20:35:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 21881122
+ 575448 DShield reports 		0.973 5 blacklists Login attempts 2025-11-14 08:31:47 2025-12-05 20:38:25
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 3615153
+ 23637 DShield reports 		0.972 13 blacklists Scanner Login attempts 2025-11-18 16:25:46 2025-12-05 20:37:12
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 8518164
+ 97310 DShield reports 		0.970 15 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-12-05 20:38:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.234 -- AS215476
DE 610262
+ 597890 DShield reports 		0.970 6 blacklists Scanner  22, 111scanner 2025-10-24 16:31:45 2025-12-05 20:37:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 2833452
+ 159594 DShield reports
+ 2 OTX pulses 		0.969 10 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2025-12-05 20:37:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.176 -- AS202306
GB 3722252
+ 182788 DShield reports
+ 4 OTX pulses 		0.969 10 blacklists Scanner  25, 80, 8080eol-product 2024-01-13 21:05:41 2025-12-05 20:40:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 12946122
+ 1688902 DShield reports 		0.964 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2025-12-05 20:29:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6296163
+ 52972 DShield reports 		0.962 5 blacklists Scanner  22, 80eol-product 2025-04-23 18:49:59 2025-12-05 20:26:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
81.22.193.93 www.sc.ed AS212913
RU 764152
+ 15973 DShield reports 		0.961 1 blacklist Scanner  22 2025-11-14 22:31:18 2025-12-05 20:37:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 3873144
+ 159170 DShield reports 		0.958 7 blacklists Login attempts  135, 137, 139, 445, 3306, ...database 2024-10-29 11:05:11 2025-12-05 19:29:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.52 -- AS215476
DE 860274
+ 171279 DShield reports 		0.956 12 blacklists Scanner  22, 111 2025-09-02 15:51:13 2025-12-05 20:37:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.114 -- AS208137
IR 820663
+ 390279 DShield reports 		0.954 5 blacklists Scanner  22, 111scanner 2025-10-19 04:56:26 2025-12-05 20:37:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.142.147.209 -- AS213438
DE 5821285
+ 917304 DShield reports
+ 37 OTX pulses 		0.953 13 blacklists Scanner  22 2025-10-23 03:24:51 2025-12-05 20:38:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.235 -- AS215476
DE 497162
+ 879276 DShield reports 		0.953 6 blacklists Scanner 2025-11-09 07:26:47 2025-12-05 20:37:16
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield