Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.148.10.121 -- AS48090
NL 16697144
+ 353072 DShield reports 		1.000 12 blacklists Scanner Login attempts  22scanner 2025-12-06 02:39:49 2026-01-13 14:32:53
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.25 hosting25.tronicsat.com AS47890
RO 10287153
+ 173417 DShield reports 		0.999 10 blacklists IP in hostname Login attempts Scanner 2025-10-05 10:37:13 2026-01-13 14:36:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 16361153
+ 286608 DShield reports 		0.999 12 blacklists IP in hostname Login attempts Scanner  3389eol-os, self-signed 2025-10-04 21:56:26 2026-01-13 14:26:05
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 13588142
+ 1659134 DShield reports 		0.999 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2026-01-13 14:27:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 64478142
+ 1458258 DShield reports 		0.998 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2026-01-13 14:35:14
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 13036173
+ 61739 DShield reports 		0.998 15 blacklists Scanner Login attempts  22scanner 2025-11-18 16:26:32 2026-01-13 14:28:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.159 -- AS208137
DE 3315123
+ 39788 DShield reports 		0.996 10 blacklists Login attempts  80, 8080 2025-12-30 18:59:58 2026-01-13 14:16:32
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.165 -- AS48090
AS47890
RO 6130153
+ 101802 DShield reports 		0.987 15 blacklists Scanner Login attempts 2025-11-19 14:33:11 2026-01-13 14:15:24
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.186 -- AS48090
AS47890
RO 9752174
+ 65070 DShield reports 		0.986 15 blacklists Scanner Login attempts 2025-11-18 16:25:46 2026-01-13 14:36:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 10244173
+ 153981 DShield reports 		0.986 16 blacklists Scanner Login attempts 2025-04-16 06:10:40 2026-01-13 13:37:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 22688163
+ 156544 DShield reports 		0.986 16 blacklists Scanner Login attempts 2025-06-06 07:38:19 2026-01-13 14:25:47
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.224.92.14 srv-91-224-92-14.serveroffer.net AS133398
AS209605
GB 86347134
+ 112403 DShield reports 		0.976 19 blacklists IP in hostname Scanner  22, 135, 445, 5985scanner 2025-10-22 14:19:29 2026-01-13 14:37:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.139.58 hostedby.privatelayer.com AS51852
CH 3156112
+ 17952 DShield reports 		0.973 1 blacklist Login attempts  135, 137, 445, 5985, 10000, ... 2025-09-02 11:57:48 2026-01-13 14:31:42
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.151 -- AS57523
HK 8652112
+ 55850 DShield reports 		0.972 5 blacklists Login attempts 2025-12-15 14:17:05 2026-01-13 14:31:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.133.154 hostedby.privatelayer.com AS51852
CH 10495112
+ 70057 DShield reports 		0.972 1 blacklist Login attempts  135, 137, 445, 10000, 10005, ... 2025-09-02 11:59:39 2026-01-13 14:02:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.5 -- AS174
US 34836115
+ 221510 DShield reports 		0.966 10 blacklists Scanner  22, 500, 9002vpn 2022-12-10 20:58:44 2026-01-13 14:34:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.20 -- AS174
US 34018105
+ 220798 DShield reports 		0.966 10 blacklists Scanner  22, 123, 4500, 9002vpn 2025-04-17 23:01:18 2026-01-13 14:32:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.27 -- AS174
US 34034105
+ 222413 DShield reports 		0.966 10 blacklists Scanner  22, 123, 500, 4500, 9002vpn 2025-04-17 23:25:56 2026-01-13 14:35:06
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.26 -- AS174
US 34208105
+ 222776 DShield reports 		0.966 10 blacklists Scanner  22, 123, 4500, 9002vpn 2025-04-17 23:22:40 2026-01-13 14:33:53
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.22 -- AS174
US 33453105
+ 225083 DShield reports 		0.965 11 blacklists Scanner  22, 123, 500, 9002vpn 2025-04-17 23:09:24 2026-01-13 14:36:35
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield