IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,642Tracked IPs
166,363Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
4501 65.49.1.36 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 15:47
4502 64.62.156.23 60 5 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 15:47
4503 167.94.145.19 60 12 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 15:45
4504 91.231.89.81 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:45
4505 20.14.73.1 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 15:42
4506 91.231.89.135 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:41
4507 91.196.152.185 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:40
4508 20.102.117.125 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:38
4509 195.184.76.137 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:37
4510 20.65.193.198 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 15:37
4511 195.184.76.169 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:36
4512 195.184.76.161 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:35
4513 91.231.89.1 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:34
4514 195.184.76.217 60 14 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:32
4515 20.163.33.22 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 15:32
4516 91.196.152.183 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:30
4517 91.231.89.143 60 7 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:28
4518 195.184.76.135 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:27
4519 91.230.168.23 60 8 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:27
4520 135.237.126.88 60 3 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:27

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.