IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,261Tracked IPs
176,322Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5541 91.230.168.3 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 21:36
5542 66.132.172.135 60 2 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 21:25
5543 128.203.200.216 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 21:25
5544 20.15.164.165 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 21:21
5545 40.124.174.187 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 21:18
5546 91.231.89.9 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 21:18
5547 91.196.152.187 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 21:13
5548 91.196.152.209 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 21:08
5549 20.127.217.70 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 21:06
5550 91.230.168.25 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 21:04
5551 91.231.89.241 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 21:04
5552 185.242.226.61 60 2 πŸ‡³πŸ‡± The Netherlands AI Spera 19 Jun 2026 - 21:04
5553 66.132.172.98 60 1 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 21:00
5554 47.254.44.193 60 1 πŸ‡ΊπŸ‡Έ United States Alibaba Cloud - US 19 Jun 2026 - 20:55
5555 40.124.174.226 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 20:52
5556 64.62.156.196 60 3 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 20:50
5557 64.62.156.147 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 20:50
5558 20.81.46.143 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 20:48
5559 66.132.172.39 60 4 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 20:46
5560 40.76.137.103 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 20:46

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.