IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,237Tracked IPs
158,146Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
3101 185.220.101.22 67 4 🇩🇪 Germany Artikel10 e.V 17 Jun 2026 - 18:34
3102 203.175.125.148 67 1 🇮🇩 Indonesia AS139952 PT Trisari Data Indonusa 17 Jun 2026 - 18:08
3103 188.68.49.235 67 4 🇩🇪 Germany NETCUP-GMBH 17 Jun 2026 - 18:05
3104 192.42.116.43 67 3 🇳🇱 The Netherlands TOR Exit and More 17 Jun 2026 - 18:03
3105 109.70.100.13 67 3 🇦🇹 Austria Foundation Applied Privacy 17 Jun 2026 - 17:56
3106 65.52.75.227 67 1 🇮🇪 Ireland Microsoft Azure Cloud (northeurope) 17 Jun 2026 - 17:48
3107 69.5.169.206 67 1 🇬🇧 United Kingdom Hydra Communications Ltd 17 Jun 2026 - 17:38
3108 192.42.116.99 67 5 🇳🇱 The Netherlands TOR Exit and More 17 Jun 2026 - 16:52
3109 167.99.13.19 67 1 🇺🇸 United States Digital Ocean 17 Jun 2026 - 16:36
3110 221.218.245.18 67 1 🇨🇳 China AS4808 China Unicom Beijing Province Network 17 Jun 2026 - 16:29
3111 205.210.31.74 67 4 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 16:26
3112 205.210.31.143 67 2 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 16:10
3113 205.210.31.68 67 5 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 16:05
3114 198.235.24.204 67 5 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 15:39
3115 71.6.232.30 67 6 🇺🇸 United States CariNet, Inc. 17 Jun 2026 - 15:37
3116 205.210.31.194 67 3 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 15:34
3117 198.235.24.25 67 3 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 15:30
3118 45.66.35.22 67 2 🇳🇱 Netherlands Sabotage LLC 17 Jun 2026 - 15:09
3119 198.235.24.249 67 5 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 15:07
3120 205.210.31.23 67 6 🇺🇸 United States Palo Alto Networks, Inc 17 Jun 2026 - 15:05

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.