IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,587Tracked IPs
165,232Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
4301 91.231.89.243 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 17:43
4302 195.184.76.91 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 17:42
4303 135.222.40.118 60 4 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 17:42
4304 66.132.172.47 60 1 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 17:42
4305 91.230.168.27 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 17:42
4306 65.49.1.88 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 17:42
4307 66.132.172.102 60 3 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 17:40
4308 66.132.172.108 60 3 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 17:40
4309 66.132.172.189 60 3 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 17:40
4310 20.65.154.175 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 17:40
4311 91.196.152.123 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 17:39
4312 66.132.195.99 60 5 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 17:39
4313 65.49.1.160 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 17:38
4314 66.132.186.181 60 3 πŸ‡ΊπŸ‡Έ United States Censys, Inc 19 Jun 2026 - 17:37
4315 64.62.156.85 60 3 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 17:36
4316 66.132.186.195 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc 19 Jun 2026 - 17:36
4317 66.132.172.45 60 2 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 17:36
4318 199.45.155.110 60 1 πŸ‡­πŸ‡° Hong Kong Censys, Inc. 19 Jun 2026 - 17:35
4319 66.132.195.98 60 3 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 17:33
4320 66.132.195.105 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 17:31

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.