Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
185.234.216.122 -- AS57523
RU 4562893
+ 80063 DShield reports
+ 51 OTX pulses 		0.986 6 blacklists Scanner  22scanner 2024-05-16 11:05:48 2024-09-13 09:06:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
79.110.62.145 -- AS400377
AS211252
AS215766
NL 196294
+ 92033 DShield reports
+ 5 OTX pulses 		0.983 11 blacklists Scanner Login attempts  22, 80, 500, 587, 1701, ...vpn, scanner 2024-03-21 09:59:04 2024-09-13 07:30:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
5.8.11.202 -- AS34665
RU 24720163
+ 92106 DShield reports
+ 5 OTX pulses 		0.978 10 blacklists Scanner  80scanner 2024-03-22 13:24:40 2024-09-13 09:05:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
154.213.185.150 -- AS51396
SC 1970861
+ 128290 DShield reports 		0.969 6 blacklists Scanner  22scanner 2024-08-04 17:36:36 2024-09-13 09:07:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.128.133 -- AS42237
SE 801952
+ 1057435 DShield reports 		0.969 1 blacklist Login attempts  135, 137, 139, 445, 5985eol-os 2023-08-01 09:26:36 2024-09-13 07:50:13
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
85.192.56.68 for-maid.aeza.network AS216246
RU 586552
+ 220388 DShield reports 		0.969 2 blacklists Login attempts  3389self-signed 2024-08-05 15:49:27 2024-09-13 08:33:34
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
154.213.184.18 -- AS51396
SC 2402852
+ 833445 DShield reports 		0.963 7 blacklists Scanner  22, 80scanner 2024-08-02 23:17:46 2024-09-13 09:05:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
80.82.77.202 rnd.group-ib.com AS202425
NL 41391133
+ 187454 DShield reports
+ 5 OTX pulses 		0.960 16 blacklists Scanner  80scanner 2023-08-17 16:11:05 2024-09-13 09:07:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
115.231.78.15 -- AS58461
CN 1199672
+ 75055 DShield reports 		0.947 9 blacklists Scanner 2024-08-24 02:33:37 2024-09-13 09:08:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
154.213.184.19 -- AS51396
SC 512252
+ 285641 DShield reports
+ 1 OTX pulses 		0.946 7 blacklists Scanner 2024-08-29 17:46:21 2024-09-13 08:22:15
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.42 security.criminalip.com AS202425
NL 1208052
+ 469692 DShield reports
+ 1 OTX pulses 		0.942 6 blacklists Research scanner Whitelisted Scanner 2024-02-14 12:00:37 2024-09-13 08:57:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.49 security.criminalip.com AS202425
NL 984152
+ 373245 DShield reports
+ 1 OTX pulses 		0.939 6 blacklists Whitelisted Research scanner Scanner 2024-02-14 11:51:36 2024-09-13 08:12:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.73.23.133 ports-measurements.softsec.ruhr-uni-bochum.de AS29484
DE 910152
+ 360231 DShield reports 		0.937 3 blacklists Scanner  80, 443, 2222eol-product, scanner 2023-10-21 16:41:11 2024-09-13 03:45:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
193.105.134.95 -- AS42237
IM 293552
+ 1045847 DShield reports 		0.937 2 blacklists Login attempts  3389eol-os, self-signed 2022-03-10 07:40:53 2024-09-13 07:52:04
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.50 security.criminalip.com AS202425
NL 1027652
+ 373263 DShield reports 		0.931 5 blacklists Research scanner Whitelisted Scanner 2024-02-14 11:35:07 2024-09-13 08:55:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
154.213.184.25 -- AS51396
SC 2436352
+ 419994 DShield reports 		0.929 7 blacklists Scanner  22, 80scanner 2024-08-02 22:42:15 2024-09-13 09:08:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
103.56.61.144 -- AS4837
CN 1058863
+ 194598 DShield reports
+ 3 OTX pulses 		0.929 13 blacklists Scanner  22scanner 2023-03-09 08:43:19 2024-09-13 09:03:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
103.56.61.130 -- AS4837
CN 1041084
+ 189183 DShield reports
+ 2 OTX pulses 		0.927 12 blacklists Scanner  22scanner 2023-03-09 09:00:10 2024-09-13 09:07:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.20 security.criminalip.com AS202425
NL 2313103
+ 42995 DShield reports
+ 3 OTX pulses 		0.926 9 blacklists Whitelisted Research scanner Scanner 2024-02-14 17:12:13 2024-09-13 08:55:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
141.98.11.128 srv-141-98-11-128.serveroffer.net LT 602452
+ 123942 DShield reports
+ 1 OTX pulses 		0.926 9 blacklists IP in hostname Scanner  22scanner 2024-02-26 08:57:34 2024-09-13 09:04:51
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield