Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
193.176.23.8 -- AS213355
US 360062
+ 192225 DShield reports 		0.970 3 blacklists Login attempts 2025-04-17 18:04:43 2025-05-05 14:00:55
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
88.214.48.19 -- AS213355
US 87882
+ 394144 DShield reports 		0.967 6 blacklists Login attempts Scanner 2025-04-17 18:10:32 2025-05-05 13:10:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.82.77.202 rnd.group-ib.com AS202425
NL 51172174
+ 412857 DShield reports
+ 8 OTX pulses 		0.966 17 blacklists Scanner  80, 443scanner 2023-08-17 16:11:05 2025-05-05 22:47:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
51.15.75.110 research.hadrian.io AS12876
FR 92252
+ 1843 DShield reports 		0.962 1 blacklist Scanner  22, 111, 179, 10250, 18080, ...scanner, devops 2025-03-12 20:42:03 2025-05-05 22:44:01
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
57.129.64.237 b3.scanner.modat.io AS16276
FR 16861123
+ 714437 DShield reports
+ 2 OTX pulses 		0.947 9 blacklists Scanner 2025-01-08 18:17:04 2025-05-05 22:16:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.128.133 -- AS42237
SE 1156172
+ 590310 DShield reports 		0.942 1 blacklist Login attempts  135, 137, 445, 5985 2023-08-01 09:26:36 2025-05-05 22:45:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
172.234.162.31 prod52client01.academyforinternetresearch.org AS63949
FR 4838154
+ 9124 DShield reports 		0.939 12 blacklists Scanner 2025-04-12 01:41:30 2025-05-05 22:48:01
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
154.197.56.163 -- AS135377
SC 5536135
+ 107624 DShield reports
+ 1 OTX pulses 		0.939 9 blacklists Scanner 2025-02-20 03:47:47 2025-05-05 22:42:41
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
89.248.163.200 recyber.net AS202425
AS35539
GB 4901962
+ 998396 DShield reports
+ 1 OTX pulses 		0.937 3 blacklists Scanner  22scanner 2022-09-21 19:44:24 2025-05-05 22:47:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
93.174.93.12 rnd.group-ib.com AS202425
NL 3442352
+ 112467 DShield reports 		0.937 8 blacklists Scanner  80, 443scanner 2024-07-18 15:27:18 2025-05-05 22:48:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.208.156.160 -- AS42624
SC 4503752
+ 174778 DShield reports
+ 1 OTX pulses 		0.937 6 blacklists Scanner  22scanner 2024-11-06 21:09:53 2025-05-05 22:49:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.218.86.4 -- US 1610063
+ 542531 DShield reports 		0.937 3 blacklists Scanner  80scanner 2025-03-23 21:55:31 2025-05-05 22:47:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
5.183.209.244 -- AS206264
NL 852652
+ 201878 DShield reports
+ 2 OTX pulses 		0.937 8 blacklists Scanner  22, 80, 443, 3306, 5000, ...eol-product, database 2025-04-05 16:05:47 2025-05-05 20:39:46
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
178.211.139.123 -- AS201814
PL 1534152
+ 136666 DShield reports 		0.937 3 blacklists Scanner 2025-04-06 18:51:37 2025-05-05 22:49:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
154.81.156.54 -- AS984
AS36680
GB 1106352
+ 933950 DShield reports
+ 2 OTX pulses 		0.937 7 blacklists Scanner  22 2025-04-08 06:11:20 2025-05-05 20:40:18
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.65.149.116 hosted-by.pfcloud.io AS51396
DE 714041
+ 24366 DShield reports 		0.937 4 blacklists Scanner 2025-04-21 07:11:31 2025-05-05 22:46:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
86.42.232.244 86-42-232-244-dynamic.agg1.srd.blp-srl.eircom.net AS5466
IE 105852
+ 746 DShield reports 		0.937 4 blacklists IP in hostname Dynamic IP Scanner 2025-02-11 08:57:05 2025-05-05 22:29:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
154.81.156.35 -- AS984
AS36680
GB 1845462
+ 1103638 DShield reports
+ 1 OTX pulses 		0.937 4 blacklists Scanner  22scanner 2025-03-26 15:40:16 2025-05-05 22:47:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
124.221.186.26 -- AS45090
CN 58542
+ 568 DShield reports 		0.937 Scanner  3000, 8080, 8805eol-product, open-dir 2024-01-15 07:00:07 2025-05-05 03:12:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
115.231.78.11 -- AS58461
CN 4645393
+ 403179 DShield reports 		0.937 9 blacklists Scanner 2024-10-24 01:37:09 2025-05-05 22:48:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield