IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,623Tracked IPs
180,822Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
6241 64.62.156.51 59 1 🇺🇸 United States The Shadow Server Foundation 19 Jun 2026 - 13:00
6242 185.220.101.160 59 3 🇩🇪 Germany CIA TRIAD SECURITY LLC 19 Jun 2026 - 12:54
6243 185.220.101.18 59 3 🇩🇪 Germany Artikel10 e.V 19 Jun 2026 - 08:09
6244 192.42.116.63 59 2 🇳🇱 The Netherlands TOR Exit and More 19 Jun 2026 - 06:10
6245 66.132.186.201 59 1 🇺🇸 United States Censys, Inc 19 Jun 2026 - 05:50
6246 188.240.59.41 59 1 🇬🇧 United Kingdom Infrawatch Limited 19 Jun 2026 - 05:27
6247 47.83.131.151 58 1 🇭🇰 Hong Kong IPXO LLC, Zenlayer Inc, Delta Centric LLC 22 Jun 2026 - 04:01
6248 122.166.228.220 58 1 🇮🇳 India ABTS (Karnataka) 21 Jun 2026 - 22:14
6249 152.163.119.82 58 1 🇺🇸 United States AS9009 M247 Europe SRL 21 Jun 2026 - 20:55
6250 152.163.119.164 58 1 🇺🇸 United States AS9009 M247 Europe SRL 21 Jun 2026 - 19:44
6251 161.0.2.88 58 1 🇺🇸 United States Rodrigo Rodriguez 21 Jun 2026 - 18:46
6252 152.163.119.122 58 1 🇺🇸 United States AS9009 M247 Europe SRL 21 Jun 2026 - 17:04
6253 1.119.194.226 58 2 🇨🇳 China BeiJing Wish Network Technology CO., LTD. 21 Jun 2026 - 16:54
6254 152.163.119.236 58 1 🇺🇸 United States AS9009 M247 Europe SRL 21 Jun 2026 - 13:23
6255 2.58.56.116 58 1 🇫🇷 France Mifsud Florian 21 Jun 2026 - 13:01
6256 47.84.202.173 58 1 🇸🇬 Singapore Delta Centric LLC, Zenlayer Inc 21 Jun 2026 - 12:49
6257 23.129.253.36 58 1 🇧🇷 Brazil Webhosting Holdings LLC 21 Jun 2026 - 10:58
6258 20.40.250.30 58 1 🇺🇸 United States Microsoft Azure Cloud (centralus) 21 Jun 2026 - 10:21
6259 152.163.119.63 58 1 🇺🇸 United States AS9009 M247 Europe SRL 21 Jun 2026 - 10:14
6260 165.227.236.157 58 1 🇬🇧 United Kingdom DigitalOcean, LLC 21 Jun 2026 - 07:24

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.