Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
91.215.85.88 -- AS200593
RU 61832132
+ 1391243 DShield reports 		0.998 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2026-01-11 00:47:24
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 13418142
+ 1658320 DShield reports 		0.991 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2026-01-11 00:40:32
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 16222153
+ 289416 DShield reports 		0.989 12 blacklists IP in hostname Login attempts Scanner  3389eol-os, self-signed 2025-10-04 21:56:26 2026-01-10 23:24:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.159 -- AS208137
DE 2651123
+ 28453 DShield reports 		0.988 10 blacklists Login attempts  80, 8080 2025-12-30 18:59:58 2026-01-11 00:45:22
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 22447174
+ 152720 DShield reports 		0.988 16 blacklists Scanner Login attempts 2025-06-06 07:38:19 2026-01-11 00:49:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 12320173
+ 56257 DShield reports 		0.981 15 blacklists Scanner Login attempts  22scanner 2025-11-18 16:26:32 2026-01-11 00:49:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 9301174
+ 60569 DShield reports 		0.978 15 blacklists Scanner Login attempts 2025-11-18 16:25:46 2026-01-11 00:46:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.165 -- AS48090
AS47890
RO 5705153
+ 96252 DShield reports 		0.969 15 blacklists Scanner Login attempts 2025-11-19 14:33:11 2026-01-11 00:36:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.133.154 hostedby.privatelayer.com AS51852
CH 9968112
+ 66849 DShield reports 		0.969 1 blacklist Login attempts  135, 137, 445, 10000, 10005, ... 2025-09-02 11:59:39 2026-01-11 00:50:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.148.10.121 -- AS48090
NL 15347144
+ 321083 DShield reports 		0.966 11 blacklists Scanner Login attempts  22scanner 2025-12-06 02:39:49 2026-01-11 00:50:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.128.133 -- AS42237
SE 647562
+ 733443 DShield reports 		0.965 2 blacklists Login attempts  135, 137, 445, 5985, 47001 2023-08-01 09:26:36 2026-01-10 23:47:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.110.239.2 buffet.census.shodan.io AS14061
US 26683115
+ 141047 DShield reports 		0.964 10 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-08-29 20:37:23 2026-01-11 00:48:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.145 -- AS47890
RO 8442184
+ 147642 DShield reports 		0.964 16 blacklists Scanner Login attempts 2025-06-06 07:36:57 2026-01-10 23:13:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.139.58 hostedby.privatelayer.com AS51852
CH 3002112
+ 17163 DShield reports 		0.962 1 blacklist Login attempts  135, 445, 5985, 10000, 10001, ... 2025-09-02 11:57:48 2026-01-10 23:46:06
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.153.30 adeptus.census.shodan.io AS14061
US 23250105
+ 149097 DShield reports 		0.961 10 blacklists Scanner Research scanner Whitelisted  22, 9002cloud 2025-09-20 14:47:12 2026-01-11 00:51:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.151 -- AS57523
HK 7863112
+ 50424 DShield reports 		0.961 5 blacklists Login attempts 2025-12-15 14:17:05 2026-01-11 00:30:01
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.238.87 can.census.shodan.io AS14061
US 27092125
+ 142048 DShield reports 		0.961 8 blacklists Whitelisted Research scanner Scanner  22, 9002cloud 2025-08-29 20:19:07 2026-01-11 00:50:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.5 -- AS174
US 33803125
+ 213316 DShield reports 		0.958 11 blacklists Scanner  22, 500, 9002vpn 2022-12-10 20:58:44 2026-01-11 00:49:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.150.150 deimos.census.shodan.io AS14061
US 24953105
+ 149166 DShield reports 		0.957 9 blacklists Whitelisted Research scanner Scanner  22, 9002cloud 2025-09-22 03:27:28 2026-01-11 00:48:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.225.197 floss.census.shodan.io AS14061
US 26886125
+ 140667 DShield reports 		0.957 8 blacklists Whitelisted Research scanner Scanner  22, 500, 9002cloud, vpn 2025-08-29 20:19:28 2026-01-11 00:48:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield