IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,071Tracked IPs
173,765Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5121 65.49.20.110 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:53
5122 66.132.172.107 60 3 πŸ‡ΊπŸ‡Έ United States Censys Inc 20 Jun 2026 - 04:52
5123 65.49.1.180 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:51
5124 65.49.1.154 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:50
5125 91.231.89.225 60 11 πŸ‡«πŸ‡· France ONYPHE 20 Jun 2026 - 04:47
5126 40.76.248.118 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 20 Jun 2026 - 04:42
5127 64.62.197.98 60 1 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:41
5128 20.29.49.244 60 3 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 20 Jun 2026 - 04:40
5129 13.89.125.225 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 20 Jun 2026 - 04:40
5130 64.62.197.141 60 1 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:38
5131 91.230.168.185 60 11 πŸ‡ΊπŸ‡Έ United States ONYPHE 20 Jun 2026 - 04:36
5132 85.217.149.2 60 7 πŸ‡¨πŸ‡¦ Canada Modat B.V 20 Jun 2026 - 04:33
5133 91.230.168.239 60 6 πŸ‡ΊπŸ‡Έ United States ONYPHE 20 Jun 2026 - 04:32
5134 66.132.186.225 60 4 πŸ‡ΊπŸ‡Έ United States Censys, Inc 20 Jun 2026 - 04:31
5135 64.62.156.49 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:30
5136 64.62.156.88 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:27
5137 64.62.197.85 60 1 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:27
5138 64.62.156.116 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:23
5139 65.49.1.91 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:22
5140 65.49.1.147 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:20

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.