IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

18,981Tracked IPs
102,016Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
6861 81.161.101.101 36 1 🇵🇱 Poland IDHosting Sp. z o. o 11 Jun 2026 - 19:12
6862 34.72.28.6 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 19:12
6863 104.154.27.18 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 19:03
6864 34.42.241.213 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 18:59
6865 34.70.108.28 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 18:57
6866 185.161.224.119 36 1 🇦🇿 Azerbaijan Caspel LLC 11 Jun 2026 - 18:56
6867 191.237.248.153 36 1 🇧🇷 Brazil Microsoft Azure Cloud (brazilsouth) 11 Jun 2026 - 18:55
6868 103.159.90.183 36 1 🇮🇳 India Pegasuswave Private Limited 11 Jun 2026 - 17:21
6869 65.111.1.144 36 1 🇺🇸 United States 3xK Tech GmbH 11 Jun 2026 - 17:09
6870 65.111.13.29 36 1 🇺🇸 United States 3xK Tech GmbH 11 Jun 2026 - 17:09
6871 209.50.169.112 36 1 🇺🇸 United States 3xK Tech GmbH 11 Jun 2026 - 17:09
6872 65.111.26.33 36 1 🇪🇸 Spain 3xK Tech GmbH 11 Jun 2026 - 17:09
6873 104.207.47.120 36 1 🇺🇸 United States 3xK Tech GmbH 11 Jun 2026 - 17:09
6874 146.196.37.110 36 1 🇮🇳 India Excitel 11 Jun 2026 - 17:07
6875 34.69.211.187 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 16:57
6876 104.28.159.63 36 1 🇸🇬 Singapore Cloudflare WARP 11 Jun 2026 - 16:45
6877 136.119.217.245 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 16:42
6878 34.31.215.6 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 16:38
6879 34.31.30.134 36 1 🇺🇸 United States Google Cloud (us-central1) 11 Jun 2026 - 16:33
6880 34.78.114.164 36 1 🇧🇪 Belgium Google Cloud (europe-west1) 11 Jun 2026 - 16:25

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.