IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,491Tracked IPs
179,451Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5941 91.230.168.11 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 17:07
5942 20.65.195.46 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 17:05
5943 20.163.2.150 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 17:03
5944 91.231.89.203 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 17:00
5945 195.184.76.19 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:57
5946 91.231.89.211 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:51
5947 64.62.156.179 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:51
5948 91.231.89.129 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:48
5949 20.127.208.220 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 16:47
5950 91.196.152.219 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:46
5951 195.184.76.211 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:44
5952 65.49.1.52 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:43
5953 195.184.76.67 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:43
5954 195.184.76.203 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:41
5955 91.231.89.107 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:41
5956 91.196.152.177 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:38
5957 91.231.89.137 60 3 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:35
5958 195.184.76.129 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:35
5959 91.230.168.17 60 3 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:34
5960 64.62.156.122 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:34

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.