IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

20,100Tracked IPs
115,182Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
2041 117.50.152.101 72 2 🇨🇳 China Shanghai UCloud Information Technology Company Limited 12 Jun 2026 - 03:46
2042 180.76.146.178 72 1 🇨🇳 China Beijing Baidu Netcom Science and Technology Co., Ltd. 12 Jun 2026 - 03:45
2043 45.5.57.132 72 1 🇵🇪 Peru Cooperativa De Ahorro Y Credito Norandin 12 Jun 2026 - 03:42
2044 51.222.96.124 72 1 🇨🇦 Canada OLEKSANDR, GUTNIK 12 Jun 2026 - 03:36
2045 172.172.196.177 72 2 🇺🇸 United States Microsoft Azure Cloud (eastus) 12 Jun 2026 - 03:12
2046 194.187.176.162 72 2 🇩🇪 Germany AS208843 Alpha Strike Labs GmbH 12 Jun 2026 - 03:05
2047 147.185.133.37 72 1 🇺🇸 United States Palo Alto Networks, Inc 12 Jun 2026 - 03:03
2048 110.168.24.174 72 1 🇹🇭 Thailand AS17552 True Online 12 Jun 2026 - 03:01
2049 147.185.133.251 72 2 🇺🇸 United States Palo Alto Networks, Inc 12 Jun 2026 - 02:56
2050 160.187.147.124 72 1 🇻🇳 Vietnam Fastvm Company Limited 12 Jun 2026 - 02:49
2051 147.185.132.121 72 2 🇺🇸 United States Palo Alto Networks, Inc 12 Jun 2026 - 02:27
2052 135.13.28.35 72 1 🇮🇳 India Microsoft Azure Cloud (southindia) 12 Jun 2026 - 02:26
2053 77.28.179.100 72 2 🇲🇰 North Macedonia MT Adsl 12 Jun 2026 - 02:24
2054 50.35.168.148 72 2 🇺🇸 United States Ziply Fiber 12 Jun 2026 - 02:20
2055 185.135.157.99 72 1 🇳🇱 The Netherlands Cyber Assets FZCO 12 Jun 2026 - 02:13
2056 217.21.193.74 72 5 🇳🇱 Netherlands Dataprovider 12 Jun 2026 - 02:12
2057 85.11.167.100 72 4 🇧🇬 Bulgaria TechTies Inc 12 Jun 2026 - 02:07
2058 82.64.200.144 72 2 🇫🇷 France Free 12 Jun 2026 - 02:02
2059 59.39.56.186 72 1 🇨🇳 China Chinanet GD 12 Jun 2026 - 01:53
2060 165.154.164.79 72 2 🇩🇪 Germany Ucloud Information Technology (hk) Limited 12 Jun 2026 - 01:50

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.