Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.140.17.97 -- AS198953
RU 11082102
+ 1473551 DShield reports 		0.995 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2025-11-21 16:44:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 11106113
+ 207012 DShield reports 		0.994 11 blacklists IP in hostname Login attempts Scanner  3389eol-os, self-signed 2025-10-04 21:56:26 2025-11-21 16:42:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 20200145
+ 767017 DShield reports
+ 1 OTX pulses 		0.993 16 blacklists Scanner Login attempts 2025-05-10 13:46:54 2025-11-21 16:43:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
204.76.203.30 204.76.203.30.ptr.pfcloud.network AS51396
NL 17091113
+ 186135 DShield reports
+ 6 OTX pulses 		0.991 12 blacklists Scanner IP in hostname  80eol-product 2025-10-07 04:23:51 2025-11-21 16:44:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 3740104
+ 166041 DShield reports 		0.987 6 blacklists Login attempts  135, 137, 139, 445, 3306, ...database 2024-10-29 11:05:11 2025-11-21 16:45:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 22864144
+ 90666 DShield reports 		0.981 16 blacklists Scanner Login attempts  22scanner 2025-06-06 07:38:19 2025-11-21 16:46:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 6959134
+ 63192 DShield reports 		0.975 14 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-11-21 16:27:55
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.128.112.74 ip-112-74.4vendeta.com AS202325
AS208637
BG 8003144
+ 229703 DShield reports 		0.973 8 blacklists IP in hostname Login attempts Scanner  22scanner 2025-05-28 12:16:17 2025-11-21 16:22:35
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.145 -- AS47890
RO 5228124
+ 50880 DShield reports 		0.972 15 blacklists Scanner Login attempts 2025-06-06 07:36:57 2025-11-21 16:42:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6532143
+ 53351 DShield reports 		0.964 5 blacklists Scanner  22, 80scanner, eol-product 2025-04-23 18:49:59 2025-11-21 12:30:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.133.154 hostedby.privatelayer.com AS51852
CH 1247102
+ 21240 DShield reports 		0.956 Login attempts  135, 445, 5985, 10000, 10001, ... 2025-09-02 11:59:39 2025-11-21 16:44:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.143.51 -- AS214943
AS42821
DE 2893144
+ 36905 DShield reports 		0.956 4 blacklists Login attempts Malware  22, 80eol-product 2025-07-25 17:29:27 2025-11-21 16:12:34
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 2266652
+ 122151 DShield reports
+ 2 OTX pulses 		0.955 9 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2025-11-21 16:46:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.176 -- AS202306
GB 3417252
+ 150242 DShield reports
+ 2 OTX pulses 		0.954 10 blacklists Scanner  25, 80, 8080eol-product 2024-01-13 21:05:41 2025-11-21 16:41:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
65.49.1.232 scan-79-00.shadowserver.org AS6939
US 8375164
+ 21084 DShield reports
+ 2 OTX pulses 		0.951 8 blacklists Research scanner Whitelisted Scanner  80scanner 2025-03-15 00:04:16 2025-11-21 16:46:21
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
178.16.54.6 -- AS209800
DE 2480492
+ 166991 DShield reports 		0.950 3 blacklists Login attempts  135, 137, 445, 10000, 10001, ... 2025-08-23 13:44:26 2025-11-21 16:34:42
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.151 -- AS47890
RO 5606144
+ 50996 DShield reports 		0.949 15 blacklists Scanner Login attempts  22 2025-06-06 07:43:00 2025-11-21 13:50:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
65.49.1.152 scan-71-00.shadowserver.org AS6939
US 8343164
+ 19174 DShield reports
+ 1 OTX pulses 		0.948 8 blacklists Whitelisted Research scanner Scanner  80scanner 2025-02-22 05:06:40 2025-11-21 16:34:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.32.195.85 scan.f6.security AS197834
AM 35802245
+ 71068 DShield reports
+ 13 OTX pulses 		0.947 12 blacklists Scanner  80scanner 2025-06-19 14:22:43 2025-11-21 16:47:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.114 -- AS208137
IR 545563
+ 269020 DShield reports 		0.944 5 blacklists Scanner 2025-10-19 04:56:26 2025-11-21 16:47:13
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield