Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
2.57.121.112 dns112.personaliseplus.com AS47890
RO 7018103
+ 141002 DShield reports 		0.997 11 blacklists IP in hostname Login attempts Scanner 2025-10-04 21:56:26 2025-11-07 17:13:43
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.114.29 -- SC 38337132
+ 60575 DShield reports
+ 116 OTX pulses 		0.995 6 blacklists Scanner  22scanner 2025-02-13 17:35:47 2025-11-07 17:10:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.157 -- AS208137
IR 10900103
+ 214688 DShield reports 		0.994 12 blacklists Login attempts  3389self-signed 2025-09-19 14:03:31 2025-11-07 17:08:04
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.156.73.233 -- AS210848
AS211736
ZA 6712123
+ 307665 DShield reports 		0.993 12 blacklists Login attempts Scanner  22, 111, 3128, 8006scanner 2025-05-15 03:41:41 2025-11-07 16:58:01
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.25 hosting25.tronicsat.com AS47890
RO 4811102
+ 96753 DShield reports 		0.993 9 blacklists IP in hostname Login attempts 2025-10-05 10:37:13 2025-11-07 17:03:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 16876145
+ 780018 DShield reports
+ 1 OTX pulses 		0.993 16 blacklists Scanner Login attempts  22scanner 2025-05-10 13:46:54 2025-11-07 16:53:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 868892
+ 1184654 DShield reports 		0.993 7 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2025-11-07 17:07:44
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.118 -- AS204428
RO 2981102
+ 49157 DShield reports 		0.988 4 blacklists Login attempts  22, 53, 111, 3128 2025-04-13 18:11:08 2025-11-07 17:03:35
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 3427104
+ 181361 DShield reports 		0.985 6 blacklists Login attempts  135, 137, 139, 445, 3306, ...database 2024-10-29 11:05:11 2025-11-07 16:16:08
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
95.215.0.144 scan.f6.security AS34665
RU 34531245
+ 171899 DShield reports
+ 11 OTX pulses 		0.981 14 blacklists Scanner  80scanner 2025-06-08 05:06:23 2025-11-07 17:14:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.32.195.85 scan.f6.security AS197834
AM 37284245
+ 71677 DShield reports
+ 11 OTX pulses 		0.971 11 blacklists Scanner  80 2025-06-19 14:22:43 2025-11-07 17:10:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
204.76.203.30 hosted-by.pfcloud.io AS51396
NL 10946113
+ 137131 DShield reports
+ 3 OTX pulses 		0.968 12 blacklists Scanner 2025-10-07 04:23:51 2025-11-07 17:10:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6648143
+ 53322 DShield reports 		0.967 5 blacklists Scanner  22, 80eol-product, scanner 2025-04-23 18:49:59 2025-11-07 10:47:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 6087124
+ 52484 DShield reports 		0.963 13 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-11-07 16:45:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.244 hostingmailto161.statics.servermail.org AS47890
RO 5700112
+ 48796 DShield reports 		0.961 12 blacklists Login attempts Scanner 2025-08-19 04:51:53 2025-11-07 17:02:21
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.88 -- AS198953
RU 1535382
+ 359006 DShield reports 		0.961 4 blacklists Login attempts 2025-10-27 18:24:06 2025-11-07 17:13:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.33 hostingmailto181.statics.servermail.org AS47890
RO 5794112
+ 48623 DShield reports 		0.960 13 blacklists Login attempts Scanner 2025-08-19 04:51:08 2025-11-07 17:02:21
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.159 hostingmailto066.statics.servermail.org AS47890
RO 6578122
+ 56251 DShield reports 		0.959 13 blacklists Login attempts Scanner 2025-08-13 06:16:33 2025-11-07 17:01:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 hostglobal.plus AS202306
GB 2014552
+ 85922 DShield reports
+ 2 OTX pulses 		0.959 10 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2025-11-07 17:11:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.20 hostingmailto112.statics.servermail.org AS47890
RO 6678102
+ 57427 DShield reports 		0.958 13 blacklists Login attempts Scanner 2025-08-12 03:11:10 2025-11-07 17:02:21
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield