Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
204.76.203.30 204.76.203.30.ptr.pfcloud.network AS51396
NL 20336123
+ 202042 DShield reports
+ 7 OTX pulses 		0.988 11 blacklists Scanner IP in hostname  80scanner, eol-product 2025-10-07 04:23:51 2025-11-28 18:15:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 24065154
+ 105639 DShield reports 		0.980 16 blacklists Scanner Login attempts  22scanner 2025-06-06 07:38:19 2025-11-28 17:45:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 12757123
+ 235343 DShield reports 		0.973 11 blacklists IP in hostname Login attempts Scanner 2025-10-04 21:56:26 2025-11-28 17:09:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6343143
+ 54161 DShield reports 		0.967 5 blacklists Scanner  22, 80eol-product, scanner 2025-04-23 18:49:59 2025-11-28 16:04:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 2395652
+ 141538 DShield reports
+ 2 OTX pulses 		0.967 10 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2025-11-28 18:10:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 12135112
+ 1581916 DShield reports 		0.966 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2025-11-28 18:01:37
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.176 -- AS202306
GB 3529152
+ 169057 DShield reports
+ 3 OTX pulses 		0.965 10 blacklists Scanner  25, 80, 8080eol-product 2024-01-13 21:05:41 2025-11-28 18:10:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 7633144
+ 80640 DShield reports 		0.962 15 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-11-28 18:01:37
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 21428145
+ 774542 DShield reports
+ 1 OTX pulses 		0.960 16 blacklists Scanner Login attempts 2025-05-10 13:46:54 2025-11-28 14:53:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.234 -- AS215476
DE 494262
+ 573756 DShield reports 		0.957 6 blacklists Scanner  22, 111scanner 2025-10-24 16:31:45 2025-11-28 18:09:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.114 -- AS208137
IR 682063
+ 388609 DShield reports 		0.954 5 blacklists Scanner  22, 111scanner 2025-10-19 04:56:26 2025-11-28 18:08:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
81.22.193.93 www.sc.ed AS212913
RU 502252
+ 10590 DShield reports 		0.952 1 blacklist Scanner  22 2025-11-14 22:31:18 2025-11-28 18:14:06
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.126 -- AS208137
IR 575563
+ 167654 DShield reports 		0.952 5 blacklists Scanner  111scanner 2025-10-20 07:21:07 2025-11-28 18:09:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.151 -- AS47890
RO 6148144
+ 68265 DShield reports 		0.951 14 blacklists Scanner Login attempts  22 2025-06-06 07:43:00 2025-11-28 18:07:54
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.145 -- AS47890
RO 5848134
+ 67906 DShield reports 		0.949 15 blacklists Scanner Login attempts 2025-06-06 07:36:57 2025-11-28 17:49:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 17300102
+ 385081 DShield reports 		0.949 5 blacklists Login attempts 2025-11-14 08:31:47 2025-11-28 18:00:23
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.52 -- AS215476
DE 722374
+ 168771 DShield reports 		0.947 12 blacklists Scanner  22, 111scanner 2025-09-02 15:51:13 2025-11-28 18:09:16
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
77.90.185.235 -- AS215476
DE 364752
+ 277993 DShield reports 		0.947 6 blacklists Scanner 2025-11-09 07:26:47 2025-11-28 18:09:17
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.32.195.85 scan.f6.security AS197834
AM 35794245
+ 69745 DShield reports
+ 13 OTX pulses 		0.947 12 blacklists Scanner  80scanner 2025-06-19 14:22:43 2025-11-28 18:14:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.156.73.233 -- AS210848
AS211736
ZA 7272123
+ 337817 DShield reports 		0.946 14 blacklists Login attempts Scanner  22, 111, 3128, 8006scanner 2025-05-15 03:41:41 2025-11-28 18:09:07
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield