IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

24,674Tracked IPs
181,699Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
6401 193.124.20.254 57 2 🇩🇪 Germany Infrawatch Limited 20 Jun 2026 - 19:19
6402 181.177.90.53 57 1 🇺🇸 United States IT World 20 Jun 2026 - 17:47
6403 176.65.148.58 57 2 🇳🇱 The Netherlands Pfcloud UG 20 Jun 2026 - 12:25
6404 64.89.163.245 57 3 🇩🇪 Germany Meowcore Softworks LLC 20 Jun 2026 - 11:55
6405 167.99.227.26 57 2 🇺🇸 United States Digital Ocean 20 Jun 2026 - 11:44
6406 179.60.149.108 57 4 🇳🇮 Nicaragua Fineisp Limited 20 Jun 2026 - 11:24
6407 89.21.67.137 57 2 🇳🇱 The Netherlands Infrawatch Limited 20 Jun 2026 - 08:10
6408 165.154.162.202 57 2 🇺🇸 United States Ucloud Information Technology 20 Jun 2026 - 08:00
6409 20.64.105.215 57 2 🇺🇸 United States Microsoft Azure Cloud (southcentralus) 20 Jun 2026 - 05:57
6410 185.213.174.70 57 1 🇳🇱 Netherlands AS41608 NextGenWebs, S.L. 20 Jun 2026 - 02:39
6411 20.83.27.89 57 1 🇺🇸 United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 19:36
6412 185.193.52.180 57 3 🇷🇴 Romania AD NET MARKET MEDIA SRL 19 Jun 2026 - 15:02
6413 104.244.79.50 57 3 🇱🇺 Luxembourg BuyVM 19 Jun 2026 - 14:37
6414 159.203.44.105 57 1 🇨🇦 Canada Digital Ocean 19 Jun 2026 - 13:54
6415 122.96.28.74 57 2 🇨🇳 China AS4837 CHINA UNICOM China169 Backbone 19 Jun 2026 - 13:15
6416 20.118.202.209 57 1 🇺🇸 United States Microsoft Azure Cloud (centralus) 19 Jun 2026 - 11:20
6417 134.122.28.193 57 2 🇺🇸 United States DigitalOcean, LLC 19 Jun 2026 - 10:26
6418 124.43.80.221 57 1 🇱🇰 Sri Lanka AS9329 Sri Lanka Telecom Internet 19 Jun 2026 - 10:25
6419 193.34.239.170 57 1 🇨🇿 Czechia Wise Speke Limited 19 Jun 2026 - 09:27
6420 34.93.66.129 56 1 🇮🇳 India Google Cloud (asia-south1) 22 Jun 2026 - 00:11

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.