Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
185.234.216.122 -- AS57523
RU 37031103
+ 62664 DShield reports
+ 51 OTX pulses 		0.978 6 blacklists Scanner  22scanner 2024-05-16 11:05:48 2024-07-27 02:33:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
176.111.174.30 -- AS57523
RU 5508162
+ 283597 DShield reports 		0.963 5 blacklists Scanner  22, 123scanner 2023-08-10 09:25:16 2024-07-27 02:34:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.169.4.105 mta105.metriclawnsderma.org AS209605
GB 4981382
+ 559199 DShield reports
+ 1 OTX pulses 		0.962 5 blacklists Scanner 2023-10-14 19:28:48 2024-07-27 02:33:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
95.214.55.85 server02.wrtwtbreyetber.net AS201814
PL 1581962
+ 414369 DShield reports 		0.962 2 blacklists Scanner  22, 80, 4000scanner 2024-05-19 13:44:24 2024-07-27 02:35:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
80.82.77.202 rnd.group-ib.com AS202425
NL 38900153
+ 128153 DShield reports
+ 6 OTX pulses 		0.959 11 blacklists Scanner  80scanner 2023-08-17 16:11:05 2024-07-27 02:36:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
193.201.9.156 -- AS49505
RU 1498073
+ 1325650 DShield reports
+ 90 OTX pulses 		0.955 7 blacklists Login attempts 2024-03-26 11:02:54 2024-07-27 02:32:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
51.159.103.10 401dbddf-b2f3-4544-aef5-f0ef61c478fc.fr-par-2.baremetal.scw.cloud AS12876
FR 5336692
+ 182296 DShield reports
+ 2 OTX pulses 		0.955 4 blacklists Scanner  22, 53scanner 2024-02-04 22:27:22 2024-07-27 02:35:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
194.169.175.107 -- AS211760
AS216419
AS209605
NL 19190133
+ 89040 DShield reports
+ 18 OTX pulses 		0.954 12 blacklists Scanner 2024-03-10 18:34:27 2024-07-27 02:33:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
84.54.51.75 -- AS202685
AS51396
NL 3020682
+ 121803 DShield reports 		0.952 4 blacklists Scanner  22, 80eol-product, scanner 2023-10-13 07:49:41 2024-07-27 02:35:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
141.98.11.15 -- AS209605
LT 2091262
+ 235809 DShield reports 		0.951 8 blacklists Scanner  22, 80eol-product, scanner 2024-04-21 10:02:21 2024-07-27 02:09:17
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.73.23.133 ports.measurement.softsec.ruhr-uni-bochum.de AS29484
DE 942062
+ 356839 DShield reports 		0.949 2 blacklists Scanner  443, 2222scanner, eol-product 2023-10-21 16:41:11 2024-07-27 02:35:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
194.26.135.230 -- AS57523
RU 2146062
+ 387862 DShield reports 		0.944 5 blacklists Scanner  22 2024-02-14 05:00:54 2024-07-27 02:35:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.139.194 hostedby.privatelayer.com AS51852
CH 357352
+ 96630 DShield reports
+ 1 OTX pulses 		0.943 4 blacklists Scanner 2024-07-08 22:16:46 2024-07-27 02:33:57
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
152.89.198.88 -- AS57523
RU 3882262
+ 391099 DShield reports 		0.942 6 blacklists Scanner  22 2024-02-14 04:56:34 2024-07-27 02:35:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
80.66.83.114 -- AS209559
IN 2161262
+ 214561 DShield reports 		0.941 3 blacklists Scanner  80eol-product 2023-12-12 12:03:24 2024-07-27 02:33:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.224.128.23 -- AS49870
AS62068
NL 302152
+ 41937 DShield reports 		0.941 2 blacklists Scanner 2024-07-11 08:02:08 2024-07-27 01:38:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
152.89.198.86 -- AS57523
RU 3763362
+ 391352 DShield reports 		0.941 6 blacklists Scanner  22 2024-02-14 04:56:34 2024-07-27 02:35:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
152.89.198.122 -- AS57523
RU 3872562
+ 391129 DShield reports 		0.940 6 blacklists Scanner  22 2024-02-14 04:56:34 2024-07-27 02:36:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
170.39.216.2 -- AS52053
CA 2609252
+ 655729 DShield reports 		0.940 2 blacklists Scanner  22scanner 2024-06-11 12:29:31 2024-07-27 02:33:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
45.93.20.104 -- AS57523
RU 3390062
+ 360667 DShield reports 		0.940 5 blacklists Scanner  22 2024-05-06 05:21:18 2024-07-27 02:36:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield