IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,077Tracked IPs
173,868Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5141 64.62.197.141 60 1 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:38
5142 91.230.168.185 60 11 πŸ‡ΊπŸ‡Έ United States ONYPHE 20 Jun 2026 - 04:36
5143 85.217.149.2 60 7 πŸ‡¨πŸ‡¦ Canada Modat B.V 20 Jun 2026 - 04:33
5144 91.230.168.239 60 6 πŸ‡ΊπŸ‡Έ United States ONYPHE 20 Jun 2026 - 04:32
5145 66.132.186.225 60 4 πŸ‡ΊπŸ‡Έ United States Censys, Inc 20 Jun 2026 - 04:31
5146 64.62.156.49 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:30
5147 64.62.156.88 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:27
5148 64.62.197.85 60 1 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:27
5149 64.62.156.116 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:23
5150 65.49.1.91 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:22
5151 65.49.1.147 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:20
5152 71.6.167.142 60 1 πŸ‡ΊπŸ‡Έ United States CariNet, Inc. 20 Jun 2026 - 04:19
5153 167.94.145.21 60 6 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 20 Jun 2026 - 04:18
5154 65.49.1.192 60 3 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:18
5155 64.62.156.113 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 20 Jun 2026 - 04:15
5156 66.132.195.154 60 3 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 20 Jun 2026 - 04:14
5157 64.62.197.126 60 2 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:13
5158 91.231.89.231 60 11 πŸ‡«πŸ‡· France ONYPHE 20 Jun 2026 - 04:12
5159 85.217.149.43 60 7 πŸ‡¨πŸ‡¦ Canada Modat B.V 20 Jun 2026 - 04:11
5160 64.62.197.116 60 6 πŸ‡ΊπŸ‡Έ United States The Shadowserver Foundation, Inc 20 Jun 2026 - 04:09

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.