Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
204.76.203.30 204.76.203.30.ptr.pfcloud.network AS51396
NL 22244123
+ 211639 DShield reports
+ 7 OTX pulses 		0.986 12 blacklists Scanner IP in hostname  80eol-product, scanner 2025-10-07 04:23:51 2025-12-02 19:25:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 3907153
+ 19902 DShield reports 		0.980 13 blacklists Scanner Login attempts 2025-11-18 16:26:32 2025-12-02 19:25:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 13157133
+ 248999 DShield reports 		0.978 11 blacklists IP in hostname Login attempts Scanner 2025-10-04 21:56:26 2025-12-02 19:20:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.157 -- AS208137
IR 14205123
+ 275769 DShield reports 		0.977 12 blacklists Login attempts Scanner  3389self-signed 2025-09-19 14:03:31 2025-12-02 19:14:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 21676145
+ 753844 DShield reports
+ 1 OTX pulses 		0.973 16 blacklists Scanner Login attempts 2025-05-10 13:46:54 2025-12-02 19:23:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 24728154
+ 114642 DShield reports 		0.969 16 blacklists Scanner Login attempts  22scanner 2025-06-06 07:38:19 2025-12-02 19:23:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 2664552
+ 152275 DShield reports
+ 2 OTX pulses 		0.969 10 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2025-12-02 19:25:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.176 -- AS202306
GB 3619052
+ 177882 DShield reports
+ 4 OTX pulses 		0.968 10 blacklists Scanner  25, 80, 8080eol-product 2024-01-13 21:05:41 2025-12-02 19:25:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.234 -- AS215476
DE 566862
+ 596865 DShield reports 		0.967 6 blacklists Scanner  22, 111scanner 2025-10-24 16:31:45 2025-12-02 19:17:14
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 3028143
+ 20472 DShield reports 		0.963 12 blacklists Scanner Login attempts 2025-11-18 16:25:46 2025-12-02 19:12:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 18885122
+ 502406 DShield reports 		0.962 5 blacklists Login attempts 2025-11-14 08:31:47 2025-12-02 19:21:14
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.114 -- AS208137
IR 767663
+ 389548 DShield reports 		0.962 5 blacklists Scanner  22, 111scanner 2025-10-19 04:56:26 2025-12-02 19:20:55
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 8040154
+ 88715 DShield reports 		0.962 15 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-12-02 19:13:44
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6251153
+ 52132 DShield reports 		0.961 5 blacklists Scanner  22, 80eol-product, scanner 2025-04-23 18:49:59 2025-12-02 15:48:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.52 -- AS215476
DE 801474
+ 169947 DShield reports 		0.960 12 blacklists Scanner  22, 111 2025-09-02 15:51:13 2025-12-02 19:17:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.126 -- AS208137
IR 673163
+ 170016 DShield reports 		0.959 5 blacklists Scanner  111scanner 2025-10-20 07:21:07 2025-12-02 19:17:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.235 -- AS215476
DE 445452
+ 598530 DShield reports 		0.956 6 blacklists Scanner 2025-11-09 07:26:47 2025-12-02 19:21:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
81.22.193.93 www.sc.ed AS212913
RU 653352
+ 13533 DShield reports 		0.954 1 blacklist Scanner  22 2025-11-14 22:31:18 2025-12-02 19:23:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.142.147.209 -- AS213438
DE 4949785
+ 855478 DShield reports
+ 34 OTX pulses 		0.952 13 blacklists Scanner  22 2025-10-23 03:24:51 2025-12-02 19:24:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.184 -- AS48090
AS47890
RO 1294123
+ 14779 DShield reports 		0.952 10 blacklists Login attempts Scanner 2025-11-19 14:33:30 2025-12-02 18:12:23
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield