Search IP addresses by ...

IP prefix
IPv4 prefix/subnet in CIDR format.
Hostname suffix
Suffix of the hostname associated with the IP address. Can be used to search all hosts under given (sub)domain.
ASN
Autonomous system number. Enter as "1234" or "AS1234”.
Country
Code of the country the IP address is probably located in (according to MaxMind database).
Source
Select IP addresses for which there are data (alerts, events, ...) from given primary data source(s).
OR
AND
Event category
Select IP addresses with Warden alerts of given category.
OR
AND
Blacklist
Select IP addresses listed on given blacklist(s).
OR
AND
Tag
Select IP addresses with given tag(s).
OR
AND

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses
IP addresses
Paste any text containing IPv4 addresses or prefixes in CIDR format. Search will return all addresses in NERD matching any of your addresses or prefixes.

Sorting options

Sort by
Order
DESC
ASC
Max. number of addresses

Results (≥20≥20)

IP address Hostname ASN Country Events Rep.(?) Other properties Time added Last activity Links
45.148.10.121 -- AS48090
NL 8042144
+ 157609 DShield reports 		0.999 10 blacklists Scanner Login attempts  22, 5901, 5902, 5904, 5906, ... 2025-12-06 02:39:49 2025-12-26 03:00:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
91.215.85.88 -- AS200593
RU 45221132
+ 1012347 DShield reports 		0.999 5 blacklists Login attempts  135, 137, 5985, 50100 2025-11-14 08:31:47 2025-12-26 03:01:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
45.140.17.97 -- AS198953
RU 14884132
+ 1833278 DShield reports 		0.998 8 blacklists Login attempts Scanner  135, 137, 5985, 50100 2025-09-21 18:44:46 2025-12-26 02:45:36
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.133.154 hostedby.privatelayer.com AS51852
CH 4765122
+ 31154 DShield reports 		0.995 1 blacklist Login attempts  135, 137, 445, 5985, 10000, ... 2025-09-02 11:59:39 2025-12-26 03:00:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.246.130.20 -- AS42237
SE 3976133
+ 115266 DShield reports 		0.990 7 blacklists Login attempts  135, 137, 139, 445, 3306, ...database 2024-10-29 11:05:11 2025-12-26 02:13:26
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
80.94.92.182 -- AS48090
AS47890
RO 8702173
+ 38043 DShield reports 		0.980 14 blacklists Scanner Login attempts  22scanner 2025-11-18 16:26:32 2025-12-26 02:31:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
179.43.139.58 hostedby.privatelayer.com AS51852
CH 2223122
+ 13978 DShield reports 		0.977 1 blacklist Login attempts  135, 137, 445, 5985, 10000, ... 2025-09-02 11:57:48 2025-12-26 02:48:53
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
194.0.234.21 -- AS214295
IR 7512122
+ 95355 DShield reports
+ 120 OTX pulses 		0.969 5 blacklists Login attempts  22, 111 2025-04-04 20:42:12 2025-12-26 01:30:24
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.149.252 drive.census.shodan.io AS14061
US 19559135
+ 135461 DShield reports 		0.968 5 blacklists Whitelisted Research scanner Scanner  22, 500, 9002vpn, cloud 2025-09-22 02:19:49 2025-12-26 03:01:07
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
24.199.126.56 resort.census.shodan.io AS14061
US 20048105
+ 136808 DShield reports 		0.967 7 blacklists Whitelisted Research scanner Scanner  22, 4500, 9002vpn, cloud 2025-09-22 03:24:15 2025-12-26 03:01:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
64.23.161.101 bed.census.shodan.io AS14061
US 20927125
+ 134293 DShield reports 		0.966 8 blacklists Whitelisted Research scanner Scanner  22, 4500, 9002vpn, cloud 2025-09-22 02:16:28 2025-12-26 02:59:45
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.21 -- AS174
US 29273115
+ 185716 DShield reports 		0.966 7 blacklists Scanner  22, 123, 500, 9002vpn 2025-06-20 19:12:40 2025-12-26 03:00:50
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
137.184.32.56 lava.census.shodan.io AS14061
US 2056495
+ 135667 DShield reports 		0.966 6 blacklists Scanner Research scanner Whitelisted  22, 4500, 9002vpn, cloud 2025-09-19 04:48:29 2025-12-26 03:00:58
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
146.190.153.30 adeptus.census.shodan.io AS14061
US 19728105
+ 134464 DShield reports 		0.966 8 blacklists Scanner Research scanner Whitelisted  22, 9002cloud 2025-09-20 14:47:12 2025-12-26 03:00:46
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.2 -- AS174
US 30165125
+ 189303 DShield reports 		0.964 10 blacklists Scanner  22, 500, 9002vpn 2022-12-08 05:10:54 2025-12-26 02:58:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
185.11.61.151 -- AS57523
HK 3267112
+ 15157 DShield reports 		0.964 4 blacklists Login attempts 2025-12-15 14:17:05 2025-12-26 03:01:29
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
143.198.150.150 deimos.census.shodan.io AS14061
US 21236115
+ 134226 DShield reports 		0.964 7 blacklists Whitelisted Research scanner Scanner  22, 500, 9002vpn, cloud 2025-09-22 03:27:28 2025-12-26 02:59:19
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.25 -- AS174
US 29026115
+ 185315 DShield reports 		0.963 9 blacklists Scanner  22, 123, 500, 4500, 9002vpn 2025-04-17 23:19:22 2025-12-26 02:58:09
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
207.90.244.10 -- AS174
US 29932115
+ 178627 DShield reports 		0.960 9 blacklists Scanner  22, 4500, 9002vpn 2023-06-22 02:59:30 2025-12-26 03:01:30
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield
193.32.162.146 -- AS47890
RO 23702174
+ 128809 DShield reports 		0.959 15 blacklists Scanner Login attempts  22scanner 2025-06-06 07:38:19 2025-12-26 02:08:39
  Shodan   Censys   valli.org   whatismyipaddress.com   AbuseIPDB   Talos Intelligence Center   Greynoise Visualizer   DShield