IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

23,371Tracked IPs
160,852Threat Reports

Worst Offenders β€” Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
3501 185.181.61.203 63 4 πŸ‡³πŸ‡΄ Norway AS56655 Gigahost AS 17 Jun 2026 - 16:10
3502 205.210.31.20 63 3 πŸ‡ΊπŸ‡Έ United States Palo Alto Networks, Inc 17 Jun 2026 - 15:57
3503 20.251.117.149 63 1 πŸ‡³πŸ‡΄ Norway Microsoft Azure Cloud (norwaye) 17 Jun 2026 - 14:58
3504 205.210.31.9 63 1 πŸ‡ΊπŸ‡Έ United States Palo Alto Networks, Inc 17 Jun 2026 - 14:57
3505 185.8.107.31 63 1 πŸ‡ΊπŸ‡Έ United States AS204770 UAB Cherry Servers 17 Jun 2026 - 14:45
3506 45.66.35.34 63 2 πŸ‡³πŸ‡± Netherlands Sabotage LLC 17 Jun 2026 - 14:45
3507 38.102.87.135 63 1 πŸ‡¨πŸ‡¦ Canada Rica Web Services 17 Jun 2026 - 14:45
3508 205.210.31.211 63 2 πŸ‡ΊπŸ‡Έ United States Palo Alto Networks, Inc 17 Jun 2026 - 14:30
3509 160.179.143.114 63 1 πŸ‡²πŸ‡¦ Morocco MarocTelecomASDL 17 Jun 2026 - 14:24
3510 64.89.163.176 63 3 πŸ‡©πŸ‡ͺ Germany Meowcore Softworks LLC 17 Jun 2026 - 13:55
3511 47.245.139.177 63 1 πŸ‡©πŸ‡ͺ Germany Alibaba Cloud LLC 17 Jun 2026 - 13:41
3512 100.29.192.27 63 1 πŸ‡ΊπŸ‡Έ United States AWS EC2 (us-east-1) 17 Jun 2026 - 13:17
3513 47.245.128.33 63 1 πŸ‡©πŸ‡ͺ Germany Alibaba Cloud LLC 17 Jun 2026 - 12:30
3514 198.235.24.18 63 1 πŸ‡ΊπŸ‡Έ United States Palo Alto Networks, Inc 17 Jun 2026 - 12:21
3515 185.220.101.129 63 2 πŸ‡©πŸ‡ͺ Germany CIA TRIAD SECURITY LLC 17 Jun 2026 - 11:33
3516 192.42.116.51 63 3 πŸ‡³πŸ‡± The Netherlands TOR Exit and More 17 Jun 2026 - 11:00
3517 152.32.225.11 63 1 πŸ‡­πŸ‡° Hong Kong Ucloud Information Technology (hk) Limited 17 Jun 2026 - 10:00
3518 176.65.142.198 63 3 πŸ‡©πŸ‡ͺ Germany ZeXoTeK IT-Services GmbH 17 Jun 2026 - 05:07
3519 109.71.252.97 63 2 πŸ‡©πŸ‡ͺ Germany Datalix 17 Jun 2026 - 05:07
3520 47.251.68.77 63 1 πŸ‡ΊπŸ‡Έ United States Alibaba Cloud - US 17 Jun 2026 - 04:15

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack β€” WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.