IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,512Tracked IPs
179,920Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
5981 135.237.126.73 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 16:02
5982 91.230.168.1 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 16:00
5983 57.154.241.151 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 16:00
5984 65.49.1.189 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 15:59
5985 64.62.156.104 60 2 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 15:55
5986 91.231.89.113 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:52
5987 135.237.126.114 60 2 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:52
5988 64.62.156.10 60 1 πŸ‡ΊπŸ‡Έ United States The Shadow Server Foundation 19 Jun 2026 - 15:52
5989 195.184.76.113 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:50
5990 91.231.89.81 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:45
5991 20.14.73.1 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (westus3) 19 Jun 2026 - 15:42
5992 91.231.89.135 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:41
5993 91.196.152.185 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:40
5994 20.102.117.125 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 15:38
5995 195.184.76.137 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:37
5996 20.65.193.198 60 1 πŸ‡ΊπŸ‡Έ United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 15:37
5997 195.184.76.169 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:36
5998 195.184.76.161 60 2 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:35
5999 91.231.89.1 60 2 πŸ‡«πŸ‡· France ONYPHE 19 Jun 2026 - 15:34
6000 195.184.76.217 60 4 πŸ‡ΊπŸ‡Έ United States ONYPHE 19 Jun 2026 - 15:32

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.