IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,488Tracked IPs
163,925Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
4021 65.49.20.85 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 20:48
4022 66.132.195.103 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 20:47
4023 40.76.137.103 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 20:46
4024 66.132.172.39 60 6 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 20:46
4025 95.215.0.144 60 4 πŸ‡·πŸ‡Ί Russia AS44050 Petersburg Internet Network ltd. 19 Jun 2026 - 20:45
4026 64.62.156.208 60 5 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 20:44
4027 66.132.195.69 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 20:44
4028 91.231.89.239 60 8 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 20:43
4029 20.168.0.85 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 20:43
4030 18.217.208.51 60 53 πŸ‡ΊπŸ‡Έ United States AWS EC2 (us-east-2) 19 Jun 2026 - 20:41
4031 193.163.125.35 60 10 πŸ‡¬πŸ‡§ United Kingdom Constantine Cybersecurity LTD 19 Jun 2026 - 20:40
4032 167.94.145.16 60 14 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 20:39
4033 18.189.74.1 60 56 πŸ‡ΊπŸ‡Έ United States AWS EC2 (us-east-2) 19 Jun 2026 - 20:39
4034 64.62.156.177 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 20:39
4035 4.227.178.194 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 20:39
4036 91.231.89.65 60 12 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 20:38
4037 167.94.145.28 60 5 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 20:37
4038 66.132.195.104 60 10 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 20:36
4039 66.132.195.23 60 22 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 20:35
4040 20.64.104.27 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 20:34

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.