Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
91.215.85.88 -- AS200593
RU 74259142
+ 1634360 DShield reports 		0.998 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2026-01-22 01:43:07
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.25 hosting25.tronicsat.com AS47890
RO 10810153
+ 166467 DShield reports 		0.997 10 blacklists IP in hostname Login attempts Scanner 2025-10-05 10:37:13 2026-01-22 01:38:34
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.148.10.121 -- AS48090
NL 20872144
+ 412498 DShield reports 		0.995 12 blacklists Scanner Login attempts  22scanner 2025-12-06 02:39:49 2026-01-22 01:41:56
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.226 -- AS57523
HK 18065112
+ 126235 DShield reports 		0.994 4 blacklists Login attempts  135, 137, 3389, 5985, 10042, ...self-signed 2025-12-15 06:51:30 2026-01-22 01:41:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.159 -- AS208137
DE 5307123
+ 58677 DShield reports 		0.990 11 blacklists Login attempts  80, 8080 2025-12-30 18:59:58 2026-01-22 01:41:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.133.154 hostedby.privatelayer.com AS51852
CH 12474112
+ 77881 DShield reports 		0.974 1 blacklist Login attempts  135, 137, 445, 10000, 10020, ... 2025-09-02 11:59:39 2026-01-22 01:34:21
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.95 -- AS48090
AS47890
US 11728173
+ 166610 DShield reports 		0.973 16 blacklists Scanner Login attempts 2025-04-16 06:10:40 2026-01-22 01:42:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.91.64.6 -- AS214664
RU 12353145
+ 40467 DShield reports
+ 5 OTX pulses 		0.966 12 blacklists Scanner 2025-12-18 12:59:28 2026-01-22 01:43:14
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
2.57.121.112 dns112.personaliseplus.com AS47890
RO 16235153
+ 267149 DShield reports 		0.963 11 blacklists IP in hostname Login attempts Scanner  3389eol-os, self-signed 2025-10-04 21:56:26 2026-01-22 01:41:31
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
104.248.242.212 -- AS14061
DE 29583
+ 2237 DShield reports 		0.961 4 blacklists Scanner Login attempts  80, 443cloud 2026-01-04 12:41:38 2026-01-21 23:48:13
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.224.92.14 srv-91-224-92-14.serveroffer.net AS133398
AS209605
GB 75604134
+ 144540 DShield reports 		0.957 18 blacklists IP in hostname Scanner  22, 445, 5985scanner 2025-10-22 14:19:29 2026-01-22 01:38:13
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 3563123
+ 83123 DShield reports 		0.953 8 blacklists Login attempts  135, 137, 139, 3306, 5985, ...database 2024-10-29 11:05:11 2026-01-22 00:39:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
213.209.159.158 -- AS208137
DE 467595
+ 68230 DShield reports 		0.952 15 blacklists Scanner Login attempts  22, 25, 80 2025-12-29 18:58:08 2026-01-22 01:40:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
78.153.140.178 -- AS202306
GB 4717752
+ 196446 DShield reports
+ 3 OTX pulses 		0.951 9 blacklists Scanner  80, 8080eol-product 2024-01-13 21:03:17 2026-01-22 01:40:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.20 -- AS174
US 36077105
+ 230426 DShield reports 		0.951 8 blacklists Scanner  22, 123, 500, 4500, 9002vpn 2025-04-17 23:01:18 2026-01-22 01:43:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.27 -- AS174
US 3633495
+ 233144 DShield reports 		0.950 10 blacklists Scanner  22, 123, 500, 4500, 9002vpn 2025-04-17 23:25:56 2026-01-22 01:43:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.25 -- AS174
US 35531105
+ 234655 DShield reports 		0.950 10 blacklists Scanner  22, 123, 4500, 9002vpn 2025-04-17 23:19:22 2026-01-22 01:42:42
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.22 -- AS174
US 35682105
+ 235171 DShield reports 		0.950 10 blacklists Scanner  22, 123, 500, 9002vpn 2025-04-17 23:09:24 2026-01-22 01:41:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.26 -- AS174
US 36436105
+ 232228 DShield reports 		0.949 9 blacklists Scanner  22, 123, 4500, 9002vpn 2025-04-17 23:22:40 2026-01-22 01:43:42
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.157 -- AS47890
RO 20924165
+ 528403 DShield reports
+ 1 OTX pulses 		0.949 17 blacklists Scanner Login attempts 2025-05-10 13:46:54 2026-01-22 00:52:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield