IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

40,861Tracked IPs
484,833Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
2301 185.226.197.57 72 1 🇳🇱 The Netherlands ICG 4 ZEN AMS 30 Jul 2026 - 17:23
2302 100.29.192.30 72 1 🇺🇸 United States AWS EC2 (us-east-1) 30 Jul 2026 - 16:58
2303 91.208.184.128 72 2 🇲🇩 Moldova Alexhost S.R.L 30 Jul 2026 - 16:56
2304 95.85.224.140 72 1 🇪🇪 Estonia 1Cent Host 30 Jul 2026 - 16:54
2305 47.250.11.46 72 1 🇲🇾 Malaysia Alibaba Cloud - MY 30 Jul 2026 - 16:26
2306 91.92.40.44 72 1 🇧🇬 Bulgaria Bullet Group LTD 30 Jul 2026 - 16:21
2307 43.156.59.86 72 1 🇸🇬 Singapore Tencent Cloud Computing 30 Jul 2026 - 15:51
2308 8.216.17.156 72 1 🇯🇵 Japan Alibaba.com Singapore E-Commerce Private Limited 30 Jul 2026 - 15:46
2309 77.239.124.244 72 1 🇳🇱 The Netherlands Alfahost LLC 30 Jul 2026 - 15:44
2310 8.216.6.6 72 1 🇯🇵 Japan Alibaba.com Singapore E-Commerce Private Limited 30 Jul 2026 - 15:31
2311 223.118.50.76 72 6 🇭🇰 Hong Kong China Mobile International Limited 30 Jul 2026 - 14:59
2312 147.185.133.97 72 1 🇺🇸 United States Palo Alto Networks, Inc 30 Jul 2026 - 14:55
2313 47.251.140.21 72 1 🇺🇸 United States Alibaba Cloud - US 30 Jul 2026 - 14:47
2314 202.29.242.115 72 1 🇹🇭 Thailand Office of Info.Tech. Admin. Educational Development 30 Jul 2026 - 14:26
2315 85.214.41.72 72 1 🇩🇪 Germany Strato AG 30 Jul 2026 - 14:22
2316 136.232.11.10 72 1 🇮🇳 India Rjil Internet 30 Jul 2026 - 14:22
2317 211.186.115.35 72 1 🇰🇷 South Korea broadNnet 30 Jul 2026 - 14:09
2318 47.254.171.201 72 1 🇩🇪 Germany Alibaba Cloud - DE 30 Jul 2026 - 13:53
2319 162.128.160.29 72 7 🇸🇬 Singapore Zenlayer Inc 30 Jul 2026 - 13:43
2320 216.25.89.99 72 1 🇺🇸 United States Palo Alto Networks, Inc 30 Jul 2026 - 13:41

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.