IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,501Tracked IPs
164,283Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
4121 65.49.1.120 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:58
4122 195.184.76.95 60 8 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:57
4123 91.231.89.247 60 8 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 19:57
4124 91.230.168.31 60 8 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:57
4125 65.49.1.214 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:57
4126 91.230.168.123 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:55
4127 91.196.152.127 60 8 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 19:54
4128 86.54.31.38 60 5 πŸ‡³πŸ‡± The Netherlands ADSL: Circle IT Solutions Limited 19 Jun 2026 - 19:54
4129 20.119.74.72 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 19:53
4130 65.49.20.110 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:53
4131 207.90.244.18 60 12 πŸ‡ΊπŸ‡Έ United States SHODAN, LLC 19 Jun 2026 - 19:52
4132 66.132.172.41 60 4 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 19:51
4133 66.132.195.36 60 3 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 19:50
4134 64.62.156.137 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:50
4135 65.49.1.28 60 3 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:48
4136 195.184.76.229 60 12 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:48
4137 74.249.128.83 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 19:47
4138 66.132.172.138 60 6 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 19:45
4139 195.184.76.109 60 11 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:45
4140 193.163.125.25 60 13 πŸ‡¬πŸ‡§ United Kingdom Constantine Cybersecurity LTD 19 Jun 2026 - 19:44

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.