IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,674Tracked IPs
166,997Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
4601 195.184.76.161 60 6 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:35
4602 91.231.89.1 60 6 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:34
4603 195.184.76.217 60 13 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:32
4604 20.163.33.22 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 15:32
4605 91.196.152.183 60 6 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:30
4606 91.231.89.143 60 6 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:28
4607 135.237.126.88 60 3 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:27
4608 195.184.76.135 60 6 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:27
4609 91.230.168.23 60 7 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:27
4610 20.106.57.131 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 15:25
4611 91.196.152.39 60 6 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:25
4612 20.106.195.24 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:18
4613 20.150.196.142 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 15:18
4614 193.163.125.11 60 3 πŸ‡¬πŸ‡§ United Kingdom Constantine Cybersecurity LTD 19 Jun 2026 - 15:16
4615 66.132.224.28 60 2 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 15:14
4616 195.184.76.39 60 6 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:13
4617 20.102.108.84 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:13
4618 66.132.195.150 60 3 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 15:12
4619 66.132.186.224 60 6 πŸ‡ΊπŸ‡Έ United States Censys, Inc 19 Jun 2026 - 15:12
4620 66.132.172.43 60 1 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 15:09

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.