Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
185.161.248.87 -- AS49202
RU 5342093
+ 76989 DShield reports
+ 115 OTX pulses 		0.987 4 blacklists Scanner  22 2023-04-26 16:02:16 2024-05-14 03:56:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.73.23.133 ports.measurement.softsec.ruhr-uni-bochum.de AS29484
DE 1095472
+ 341575 DShield reports 		0.982 2 blacklists Scanner  443, 2222eol-product, scanner 2023-10-21 16:41:11 2024-05-14 03:56:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
84.54.51.75 hosted-by.pfcloud.io AS202685
AS51396
NL 3217492
+ 118027 DShield reports 		0.981 4 blacklists Scanner  80eol-product 2023-10-13 07:49:41 2024-05-14 03:23:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
141.98.11.79 eletrire.halffail.com AS209605
LT 535972
+ 41395 DShield reports 		0.980 6 blacklists Scanner  3389self-signed 2024-04-27 05:44:01 2024-05-14 03:58:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
141.98.11.15 -- AS209605
LT 652763
+ 54641 DShield reports 		0.976 9 blacklists Scanner 2024-04-21 10:02:21 2024-05-14 03:23:32
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.229 edc74.daten-de.com AS48090
AS47890
US 202173
+ 29430 DShield reports
+ 1 OTX pulses 		0.973 12 blacklists Login attempts Scanner 2024-04-21 19:50:48 2024-05-14 03:08:37
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
193.201.9.156 -- AS49505
RU 642973
+ 722196 DShield reports
+ 37 OTX pulses 		0.971 9 blacklists Login attempts Scanner 2024-03-26 11:02:54 2024-05-14 03:55:12
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.120 -- AS57523
RU 1609562
+ 168765 DShield reports 		0.970 5 blacklists Scanner  22, 123scanner 2024-03-30 22:13:20 2024-05-14 03:55:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
51.159.103.10 401dbddf-b2f3-4544-aef5-f0ef61c478fc.fr-par-2.baremetal.scw.cloud AS12876
FR 6001072
+ 183195 DShield reports
+ 2 OTX pulses 		0.970 10 blacklists Scanner  22, 53 2024-02-04 22:27:22 2024-05-14 03:59:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.161.248.120 -- AS49202
RU 4810772
+ 252352 DShield reports 		0.968 4 blacklists Scanner  123scanner 2023-09-18 07:46:02 2024-05-14 03:59:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.180.108 hostedby.privatelayer.com AS51852
CH 13570104
+ 45275 DShield reports
+ 5 OTX pulses 		0.968 14 blacklists Scanner Login attempts 2024-04-17 01:15:10 2024-05-14 03:50:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
176.111.174.29 -- AS57523
RU 4809372
+ 368106 DShield reports 		0.967 7 blacklists Scanner  123scanner 2023-07-28 07:12:57 2024-05-14 03:56:03
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
176.111.174.30 -- AS57523
RU 5178862
+ 292950 DShield reports 		0.966 8 blacklists Scanner  123 2023-08-10 09:25:16 2024-05-14 03:59:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.27 security.criminalip.com AS202425
NL 899772
+ 274471 DShield reports 		0.965 5 blacklists Whitelisted Research scanner Scanner 2024-02-14 16:54:50 2024-05-13 23:25:22
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
80.75.212.75 tube-hosting.com AS49581
DE 2001092
+ 1653557 DShield reports
+ 1 OTX pulses 		0.965 5 blacklists Scanner  22, 3001scanner 2024-03-06 01:55:07 2024-05-14 03:58:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
194.26.29.158 -- AS206728
RU 3496672
+ 475875 DShield reports 		0.965 4 blacklists Scanner 2024-03-21 20:50:20 2024-05-14 03:59:49
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
193.35.18.40 -- AS202685
AS51396
NL 889173
+ 41626 DShield reports
+ 2 OTX pulses 		0.964 5 blacklists Scanner  22, 4444, 8080scanner 2024-03-05 06:29:43 2024-05-14 03:58:20
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
194.169.175.106 -- AS211760
AS216419
AS209605
NL 14371103
+ 98912 DShield reports 		0.964 11 blacklists Scanner  22scanner 2024-03-10 18:16:30 2024-05-14 03:48:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
154.212.141.198 -- AS9465
HK 2783571
+ 109411 DShield reports 		0.963 4 blacklists Scanner 2024-04-02 14:20:56 2024-05-14 03:55:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
85.209.11.227 -- AS57523
RU 389873
+ 604707 DShield reports 		0.962 8 blacklists Login attempts Scanner  135, 445, 5985scanner 2023-10-07 08:40:43 2024-05-14 03:55:12
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield