IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

40,936Tracked IPs
487,435Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
3061 185.220.101.1 65 2 πŸ‡©πŸ‡ͺ Germany Artikel10 e.V 31 Jul 2026 - 12:03
3062 192.42.116.43 65 6 πŸ‡³πŸ‡± The Netherlands TOR Exit and More 31 Jul 2026 - 10:04
3063 185.231.33.38 65 2 πŸ‡ΈπŸ‡¨ Seychelles AS211720 Datashield, Inc. 31 Jul 2026 - 10:03
3064 193.189.100.203 65 4 πŸ‡ΈπŸ‡ͺ Sweden KeFF Networks Ltd 31 Jul 2026 - 10:02
3065 185.243.218.232 65 2 πŸ‡³πŸ‡΄ Norway Gigahost 31 Jul 2026 - 09:40
3066 185.220.101.108 65 2 πŸ‡©πŸ‡ͺ Germany Digitalcourage e.V 31 Jul 2026 - 09:39
3067 91.203.144.194 65 3 πŸ‡ΊπŸ‡¦ Ukraine GOODNET 31 Jul 2026 - 08:41
3068 185.220.101.21 65 2 πŸ‡©πŸ‡ͺ Germany Artikel10 e.V 31 Jul 2026 - 08:39
3069 193.189.100.194 65 2 πŸ‡ΈπŸ‡ͺ Sweden KeFF Networks Ltd 31 Jul 2026 - 07:34
3070 185.243.218.233 65 2 πŸ‡³πŸ‡΄ Norway Gigahost 31 Jul 2026 - 07:33
3071 194.32.107.14 65 4 πŸ‡³πŸ‡΄ Norway Gigahost 31 Jul 2026 - 07:18
3072 100.29.192.50 65 1 πŸ‡ΊπŸ‡Έ United States AWS EC2 (us-east-1) 31 Jul 2026 - 07:16
3073 192.42.116.114 65 6 πŸ‡³πŸ‡± The Netherlands TOR Exit and More 31 Jul 2026 - 06:23
3074 95.211.239.220 65 1 πŸ‡³πŸ‡± The Netherlands LeaseWeb Netherlands B.V. 31 Jul 2026 - 03:37
3075 107.189.1.9 65 2 πŸ‡±πŸ‡Ί Luxembourg BuyVM 30 Jul 2026 - 23:25
3076 185.220.101.107 65 2 πŸ‡©πŸ‡ͺ Germany Digitalcourage e.V 30 Jul 2026 - 23:25
3077 185.181.61.203 65 2 πŸ‡³πŸ‡΄ Norway AS56655 Gigahost AS 30 Jul 2026 - 12:49
3078 192.42.116.98 65 4 πŸ‡³πŸ‡± The Netherlands TOR Exit and More 30 Jul 2026 - 10:33
3079 111.74.57.220 64 2 πŸ‡¨πŸ‡³ China Chinanet JX 2 Aug 2026 - 06:40
3080 176.65.148.13 64 2 πŸ‡³πŸ‡± The Netherlands Pfcloud UG 1 Aug 2026 - 21:23

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.