IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,286Tracked IPs
159,184Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
3321 193.176.31.210 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 06:11
3322 64.89.163.148 65 4 🇩🇪 Germany Meowcore Softworks LLC 19 Jun 2026 - 05:50
3323 188.240.59.49 65 3 🇬🇧 United Kingdom Infrawatch Limited 19 Jun 2026 - 05:36
3324 101.65.170.215 65 2 🇨🇳 China AS4837 CHINA UNICOM China169 Backbone 19 Jun 2026 - 05:03
3325 89.21.67.185 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 04:43
3326 193.176.31.155 65 2 🇳🇱 Netherlands Infrawatch Limited 19 Jun 2026 - 04:42
3327 185.223.235.3 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 04:42
3328 81.19.216.91 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 04:42
3329 89.21.67.165 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 04:42
3330 103.120.189.74 65 2 🇮🇳 India Netstra Communications Pvt Ltd 19 Jun 2026 - 04:33
3331 8.209.68.55 65 2 🇩🇪 Germany AS45102 Alibaba (US) Technology Co., Ltd. 19 Jun 2026 - 04:08
3332 64.227.150.86 65 2 🇮🇳 India DigitalOcean, LLC 19 Jun 2026 - 03:28
3333 8.216.16.169 65 2 🇯🇵 Japan Alibaba.com Singapore E-Commerce Private Limited 19 Jun 2026 - 03:21
3334 152.163.119.246 65 2 🇺🇸 United States AS9009 M247 Europe SRL 19 Jun 2026 - 03:19
3335 185.223.235.42 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 02:24
3336 185.223.235.50 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 02:24
3337 81.19.216.120 65 2 🇳🇱 The Netherlands Infrawatch Limited 19 Jun 2026 - 02:24
3338 37.114.50.142 65 3 🇩🇪 Germany Datalix 19 Jun 2026 - 01:08
3339 45.156.128.64 65 2 🇳🇱 The Netherlands Inap AMS 19 Jun 2026 - 00:51
3340 172.70.214.11 65 2 🇺🇸 United States Cloudflare WARP 19 Jun 2026 - 00:44

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.