IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,261Tracked IPs
176,322Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5501 91.196.152.125 60 5 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 23:16
5502 66.132.195.125 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 23:10
5503 172.202.118.38 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 23:07
5504 195.184.76.245 60 5 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 23:04
5505 20.168.6.241 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 23:02
5506 91.230.168.222 60 1 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 23:02
5507 91.231.89.94 60 1 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 22:57
5508 66.132.195.119 60 2 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 22:52
5509 199.45.155.97 60 3 πŸ‡­πŸ‡° Hong Kong Censys, Inc. 19 Jun 2026 - 22:48
5510 20.169.104.65 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 22:46
5511 66.132.172.192 60 3 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 22:45
5512 91.230.168.13 60 5 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 22:44
5513 66.132.195.101 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 22:43
5514 185.242.226.90 60 2 πŸ‡³πŸ‡± The Netherlands AI Spera 19 Jun 2026 - 22:37
5515 20.64.105.6 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 22:37
5516 91.231.89.205 60 5 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 22:35
5517 195.184.76.21 60 5 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 22:31
5518 66.132.195.55 60 5 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 22:28
5519 91.231.89.213 60 5 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 22:26
5520 172.210.67.69 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 22:26

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.