Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
185.161.248.87 -- AS49202
RU 5366093
+ 77820 DShield reports
+ 115 OTX pulses 		0.989 4 blacklists Scanner  22 2023-04-26 16:02:16 2024-05-14 13:15:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
84.54.51.75 hosted-by.pfcloud.io AS202685
AS51396
NL 3189492
+ 117958 DShield reports 		0.988 4 blacklists Scanner  80eol-product 2023-10-13 07:49:41 2024-05-14 13:16:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.73.23.133 ports.measurement.softsec.ruhr-uni-bochum.de AS29484
DE 1098372
+ 345343 DShield reports 		0.984 2 blacklists Scanner  443, 2222eol-product, scanner 2023-10-21 16:41:11 2024-05-14 05:47:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
141.98.11.79 eletrire.halffail.com AS209605
LT 549572
+ 43839 DShield reports 		0.980 6 blacklists Scanner  3389self-signed 2024-04-27 05:44:01 2024-05-14 12:35:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
176.111.174.29 -- AS57523
RU 4778672
+ 369744 DShield reports 		0.980 7 blacklists Scanner  123scanner 2023-07-28 07:12:57 2024-05-14 13:13:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
176.111.174.30 -- AS57523
RU 5175662
+ 292748 DShield reports 		0.979 8 blacklists Scanner  123 2023-08-10 09:25:16 2024-05-14 13:12:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
141.98.11.15 -- AS209605
LT 667963
+ 57888 DShield reports 		0.976 9 blacklists Scanner 2024-04-21 10:02:21 2024-05-14 12:35:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.180.108 hostedby.privatelayer.com AS51852
CH 13626104
+ 46105 DShield reports
+ 5 OTX pulses 		0.976 14 blacklists Scanner Login attempts 2024-04-17 01:15:10 2024-05-14 12:58:48
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
92.118.39.229 edc74.daten-de.com AS48090
AS47890
US 205873
+ 31182 DShield reports
+ 1 OTX pulses 		0.973 12 blacklists Login attempts Scanner 2024-04-21 19:50:48 2024-05-14 12:15:41
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.161.248.120 -- AS49202
RU 4773872
+ 253500 DShield reports 		0.972 4 blacklists Scanner  123scanner 2023-09-18 07:46:02 2024-05-14 13:13:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
193.201.9.156 -- AS49505
RU 650473
+ 737037 DShield reports
+ 37 OTX pulses 		0.971 9 blacklists Login attempts Scanner 2024-03-26 11:02:54 2024-05-14 13:11:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.120 -- AS57523
RU 1627562
+ 173375 DShield reports 		0.970 5 blacklists Scanner  22, 123scanner 2024-03-30 22:13:20 2024-05-14 13:15:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
51.159.103.10 401dbddf-b2f3-4544-aef5-f0ef61c478fc.fr-par-2.baremetal.scw.cloud AS12876
FR 6026972
+ 184952 DShield reports
+ 2 OTX pulses 		0.970 10 blacklists Scanner  22, 53 2024-02-04 22:27:22 2024-05-14 13:13:28
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
194.169.175.106 -- AS211760
AS216419
AS209605
NL 14400103
+ 98949 DShield reports 		0.968 11 blacklists Scanner  22scanner 2024-03-10 18:16:30 2024-05-14 11:21:10
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.224.128.17 -- AS49870
AS62068
NL 49631103
+ 740865 DShield reports 		0.965 5 blacklists Scanner  3000 2022-11-18 23:15:29 2024-05-14 13:15:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
85.209.11.227 -- AS57523
RU 387273
+ 608649 DShield reports 		0.965 8 blacklists Login attempts Scanner  135, 445, 5985scanner 2023-10-07 08:40:43 2024-05-14 12:59:27
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
80.75.212.75 tube-hosting.com AS49581
DE 2019292
+ 1687384 DShield reports
+ 1 OTX pulses 		0.965 5 blacklists Scanner  22, 3001scanner 2024-03-06 01:55:07 2024-05-14 13:11:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
194.26.29.158 -- AS206728
RU 3523072
+ 485383 DShield reports 		0.965 4 blacklists Scanner 2024-03-21 20:50:20 2024-05-14 13:14:59
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
78.128.114.2 ip-114-2.4vendeta.com AS50360
BG 2264162
+ 359680 DShield reports
+ 1 OTX pulses 		0.965 3 blacklists IP in hostname Scanner 2024-04-09 05:31:45 2024-05-14 13:14:00
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield
185.242.226.39 security.criminalip.com AS202425
NL 532062
+ 322615 DShield reports
+ 1 OTX pulses 		0.965 4 blacklists Whitelisted Research scanner Scanner 2024-02-14 16:53:27 2024-05-14 12:15:38
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Threat Crowd   Talos Intelligence Center   Greynoise Visualizer   DShield