IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,299Tracked IPs
176,968Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5561 20.102.40.205 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 23:34
5562 20.84.145.84 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 23:26
5563 91.196.152.213 60 5 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 23:22
5564 52.188.185.85 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 23:21
5565 195.184.76.93 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 23:19
5566 91.231.89.245 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 23:19
5567 91.196.152.125 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 23:16
5568 66.132.195.125 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 23:10
5569 172.202.118.38 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 23:07
5570 195.184.76.245 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 23:04
5571 20.168.6.241 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 23:02
5572 91.230.168.222 60 1 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 23:02
5573 91.231.89.94 60 1 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 22:57
5574 66.132.195.119 60 2 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 22:52
5575 199.45.155.97 60 3 πŸ‡­πŸ‡° Hong Kong Censys, Inc. 19 Jun 2026 - 22:48
5576 20.169.104.65 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 22:46
5577 66.132.172.192 60 3 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 22:45
5578 91.230.168.13 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 22:44
5579 66.132.195.101 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 22:43
5580 185.242.226.90 60 2 πŸ‡³πŸ‡± The Netherlands AI Spera 19 Jun 2026 - 22:37

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.