IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,510Tracked IPs
179,900Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5961 91.231.89.129 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:48
5962 20.127.208.220 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 16:47
5963 91.196.152.219 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:46
5964 195.184.76.211 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:44
5965 65.49.1.52 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:43
5966 195.184.76.67 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:43
5967 195.184.76.203 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:41
5968 91.231.89.107 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:41
5969 91.196.152.177 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:38
5970 91.231.89.137 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:35
5971 195.184.76.129 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:35
5972 91.230.168.17 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:34
5973 64.62.156.122 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:34
5974 91.196.152.33 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 16:32
5975 135.237.126.9 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 16:26
5976 195.184.76.33 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:20
5977 64.62.156.11 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 16:16
5978 20.169.107.239 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 16:12
5979 91.230.168.220 60 1 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:08
5980 195.184.76.179 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:06

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.