IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

40,272Tracked IPs
478,017Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
81 147.185.132.108 88 3 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 19:57
82 147.185.132.201 88 11 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 19:49
83 205.210.31.216 88 3 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 19:48
84 198.235.24.110 88 4 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 19:44
85 195.178.110.72 88 1 BPH 🇦🇩 Andorra Techoff SRV Limited 31 Jul 2026 - 19:28
86 178.20.210.152 88 24 🇰🇿 Kazakhstan Shereverov network 31 Jul 2026 - 18:31
87 62.60.130.148 88 16 🇮🇷 Iran UAB Host Baltic 31 Jul 2026 - 18:02
88 2.57.122.238 88 2 BPH 🇳🇱 The Netherlands Techoff SRV Limited 31 Jul 2026 - 16:19
89 103.5.3.100 88 29 🇵🇭 Philippines Kalibo Cable Television Network Inc 31 Jul 2026 - 15:54
90 78.128.113.46 88 29 BPH 🇧🇬 Bulgaria Miti 2000 EOOD 31 Jul 2026 - 15:46
91 213.209.159.154 88 3 BPH 🇩🇪 Germany Feo Prest SRL 31 Jul 2026 - 15:41
92 147.185.132.22 88 9 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 15:33
93 216.25.89.131 88 5 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 15:09
94 205.210.31.225 88 7 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 15:02
95 205.210.31.87 88 7 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 14:33
96 147.185.132.109 88 6 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 14:13
97 147.185.132.81 88 6 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 13:36
98 198.235.24.193 88 4 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 13:36
99 147.185.132.30 88 10 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 13:24
100 198.235.24.208 88 3 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 13:21

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.