IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,356Tracked IPs
177,598Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5701 91.231.89.105 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 20:02
5702 91.196.152.215 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 20:00
5703 20.65.193.255 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 19:59
5704 64.62.156.163 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:59
5705 195.184.76.95 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:57
5706 91.231.89.247 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 19:57
5707 91.230.168.31 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:57
5708 65.49.1.214 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:57
5709 91.196.152.127 60 4 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 19:54
5710 66.132.172.41 60 1 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 19:51
5711 66.132.195.36 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 19:50
5712 65.49.1.28 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:48
5713 74.249.128.83 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 19:47
5714 66.132.172.138 60 2 πŸ‡ΊπŸ‡Έ United States Censys Inc 19 Jun 2026 - 19:45
5715 195.184.76.247 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:42
5716 64.62.156.186 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 19:40
5717 66.132.195.120 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc. 19 Jun 2026 - 19:37
5718 91.230.168.221 60 1 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 19:35
5719 20.121.139.167 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 19:32
5720 66.132.186.199 60 1 πŸ‡ΊπŸ‡Έ United States Censys, Inc 19 Jun 2026 - 19:31

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.