IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,614Tracked IPs
165,794Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
4401 195.184.76.6 60 1 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 17:12
4402 65.49.1.179 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 17:11
4403 91.230.168.11 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 17:07
4404 20.65.195.46 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 17:05
4405 20.163.2.150 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 17:03
4406 91.231.89.203 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 17:00
4407 195.184.76.19 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:57
4408 65.49.1.142 60 4 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:54
4409 91.231.89.211 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:51
4410 64.62.156.179 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:51
4411 91.231.89.129 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:48
4412 20.127.208.220 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 16:47
4413 91.196.152.219 60 8 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:46
4414 66.132.172.157 60 6 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 16:46
4415 65.49.1.185 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:44
4416 195.184.76.211 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:44
4417 65.49.1.52 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:43
4418 195.184.76.67 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:43
4419 195.184.76.203 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:41
4420 91.231.89.107 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:41

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.