Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
2.57.121.112 dns112.personaliseplus.com AS47890
RO 7635103
+ 150094 DShield reports 		0.997 11 blacklists IP in hostname Login attempts Scanner  3389self-signed, eol-os 2025-10-04 21:56:26 2025-11-09 13:33:14
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
196.251.114.29 -- SC 37830132
+ 60517 DShield reports
+ 115 OTX pulses 		0.996 6 blacklists Scanner  22scanner 2025-02-13 17:35:47 2025-11-09 13:35:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
62.60.131.157 -- AS208137
IR 11312103
+ 221067 DShield reports 		0.995 12 blacklists Login attempts  3389self-signed 2025-09-19 14:03:31 2025-11-09 13:29:41
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 906692
+ 1219899 DShield reports 		0.994 7 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2025-11-09 13:34:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.25 hosting25.tronicsat.com AS47890
RO 5091102
+ 101743 DShield reports 		0.993 9 blacklists IP in hostname Login attempts Scanner 2025-10-05 10:37:13 2025-11-09 13:33:14
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.156.73.233 -- AS210848
AS211736
ZA 6621123
+ 304335 DShield reports 		0.993 12 blacklists Login attempts Scanner  22, 111, 3128, 8006scanner 2025-05-15 03:41:41 2025-11-09 10:58:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 17439145
+ 785873 DShield reports
+ 1 OTX pulses 		0.992 16 blacklists Scanner Login attempts 2025-05-10 13:46:54 2025-11-09 13:35:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.88 -- AS198953
RU 1799982
+ 426397 DShield reports 		0.988 4 blacklists Login attempts 2025-10-27 18:24:06 2025-11-09 13:35:52
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.95.118 -- AS204428
RO 3074102
+ 50908 DShield reports 		0.988 4 blacklists Login attempts  22, 53, 111, 3128 2025-04-13 18:11:08 2025-11-09 11:01:04
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 3472104
+ 179328 DShield reports 		0.985 6 blacklists Login attempts  135, 137, 139, 445, 3306, ...database 2024-10-29 11:05:11 2025-11-09 11:11:37
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
95.215.0.144 scan.f6.security AS34665
RU 34433235
+ 172108 DShield reports
+ 11 OTX pulses 		0.981 14 blacklists Scanner  80scanner 2025-06-08 05:06:23 2025-11-09 13:34:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
149.100.11.243 -- AS174
ES 6655143
+ 53365 DShield reports 		0.971 5 blacklists Scanner  22, 80eol-product, scanner 2025-04-23 18:49:59 2025-11-09 12:20:04
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
204.76.203.30 hosted-by.pfcloud.io AS51396
NL 11670113
+ 145710 DShield reports
+ 3 OTX pulses 		0.966 12 blacklists Scanner 2025-10-07 04:23:51 2025-11-09 13:33:40
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.145 -- AS47890
RO 4419124
+ 39542 DShield reports 		0.964 14 blacklists Scanner Login attempts 2025-06-06 07:36:57 2025-11-09 13:36:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.159 hostingmailto066.statics.servermail.org AS47890
RO 6736122
+ 56757 DShield reports 		0.964 13 blacklists Login attempts Scanner 2025-08-13 06:16:33 2025-11-09 13:34:02
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 6086124
+ 52377 DShield reports 		0.962 13 blacklists Scanner Login attempts 2025-04-16 06:10:40 2025-11-09 13:13:06
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
65.49.1.232 scan-79-00.shadowserver.org AS6939
US 8150154
+ 21080 DShield reports
+ 2 OTX pulses 		0.960 8 blacklists Research scanner Whitelisted Scanner  80scanner 2025-03-15 00:04:16 2025-11-09 13:35:25
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
176.32.195.85 scan.f6.security AS197834
AM 37437245
+ 72479 DShield reports
+ 11 OTX pulses 		0.959 11 blacklists Scanner  80 2025-06-19 14:22:43 2025-11-09 13:34:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.176 -- AS202306
GB 3282752
+ 116964 DShield reports
+ 1 OTX pulses 		0.958 10 blacklists Scanner  25, 80, 8080eol-product 2024-01-13 21:05:41 2025-11-09 13:36:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.46.255.244 hostingmailto161.statics.servermail.org AS47890
RO 5859112
+ 49214 DShield reports 		0.958 12 blacklists Login attempts Scanner 2025-08-19 04:51:53 2025-11-09 13:26:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield