IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,648Tracked IPs
181,286Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
6341 124.223.112.24 58 1 🇨🇳 China Tencent cloud computing (Beijing) Co., Ltd. 19 Jun 2026 - 20:18
6342 45.156.128.153 58 1 🇳🇱 The Netherlands Inap AMS 19 Jun 2026 - 20:16
6343 45.156.128.155 58 1 🇳🇱 The Netherlands Inap AMS 19 Jun 2026 - 20:15
6344 152.42.212.137 58 1 🇸🇬 Singapore DigitalOcean, LLC 19 Jun 2026 - 19:06
6345 20.102.115.137 58 1 🇺🇸 United States Microsoft Azure Cloud (eastus) 19 Jun 2026 - 19:01
6346 181.177.90.55 58 1 🇺🇸 United States IT World 19 Jun 2026 - 18:59
6347 20.65.195.32 58 1 🇺🇸 United States Microsoft Azure Cloud (southcentralus) 19 Jun 2026 - 18:39
6348 181.177.90.71 58 1 🇺🇸 United States IT World 19 Jun 2026 - 18:37
6349 193.163.125.41 58 2 🇬🇧 United Kingdom Constantine Cybersecurity LTD 19 Jun 2026 - 18:35
6350 199.45.154.156 58 1 🇺🇸 United States Censys, Inc. 19 Jun 2026 - 17:45
6351 181.177.90.1 58 1 🇺🇸 United States IT World 19 Jun 2026 - 17:29
6352 45.66.35.28 58 5 🇳🇱 The Netherlands Sabotage LLC 19 Jun 2026 - 16:40
6353 45.66.35.24 58 2 🇳🇱 Netherlands Sabotage LLC 19 Jun 2026 - 16:38
6354 34.101.127.234 58 1 🇮🇩 Indonesia Google Cloud (asia-southeast2) 19 Jun 2026 - 16:38
6355 38.158.83.105 58 1 🇵🇪 Peru Cogent Communications 19 Jun 2026 - 16:29
6356 171.25.193.39 58 4 🇸🇪 Sweden DFRI 19 Jun 2026 - 16:03
6357 152.163.119.129 58 1 🇺🇸 United States AS9009 M247 Europe SRL 19 Jun 2026 - 15:59
6358 85.198.19.244 58 2 🇮🇷 Iran AS60077 Asre Dadeha Asiatech 19 Jun 2026 - 15:38
6359 185.220.101.177 58 2 🇩🇪 Germany CIA TRIAD SECURITY LLC 19 Jun 2026 - 15:29
6360 47.250.80.106 58 1 🇲🇾 Malaysia Alibaba Cloud - MY 19 Jun 2026 - 15:27

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.