IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

19,480Tracked IPs
107,869Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
1001 71.6.134.233 74 2 🇺🇸 United States CariNet, Inc. 12 Jun 2026 - 06:05
1002 179.63.15.107 74 1 🇧🇷 Brazil HD NET TELECOM & INFORMATICA 12 Jun 2026 - 05:47
1003 147.185.133.97 74 4 🇺🇸 United States Palo Alto Networks, Inc 12 Jun 2026 - 05:20
1004 172.239.51.96 74 2 🇺🇸 United States Akamai Technologies, Inc. 12 Jun 2026 - 04:33
1005 148.153.56.170 74 2 🇺🇸 United States CDS Global Cloud Co., Ltd 12 Jun 2026 - 04:32
1006 45.82.76.109 74 1 🇬🇧 United Kingdom Detai Prosperous Technologies Limited 12 Jun 2026 - 04:14
1007 172.213.25.203 74 2 🇮🇹 Italy Microsoft Azure Cloud (italynorth) 12 Jun 2026 - 04:13
1008 52.236.66.21 74 2 🇮🇪 Ireland Microsoft Azure Cloud (northeurope) 12 Jun 2026 - 03:21
1009 102.129.186.123 74 1 🇿🇦 South Africa ipxo 12 Jun 2026 - 03:01
1010 185.148.3.54 74 2 🇫🇮 Finland Magnacapax 12 Jun 2026 - 02:06
1011 64.226.83.235 74 2 🇩🇪 Germany DigitalOcean, LLC 12 Jun 2026 - 01:19
1012 176.65.149.50 74 3 🇳🇱 Netherlands Pfcloud UG 11 Jun 2026 - 22:08
1013 210.206.8.121 74 2 🇰🇷 South Korea LG Uplus 11 Jun 2026 - 21:24
1014 216.25.89.91 74 1 🇺🇸 United States Palo Alto Networks, Inc 11 Jun 2026 - 20:36
1015 176.65.149.167 74 2 🇳🇱 Netherlands Pfcloud UG 11 Jun 2026 - 20:30
1016 77.83.39.54 74 7 🇳🇱 The Netherlands Lanedonet Datacenter 11 Jun 2026 - 18:16
1017 152.32.139.9 74 1 🇰🇷 South Korea Ucloud Information Technology 11 Jun 2026 - 15:02
1018 185.223.235.33 74 2 🇳🇱 Netherlands Hydra Communications Ltd 11 Jun 2026 - 13:22
1019 107.172.80.207 74 2 🇺🇸 United States RackNerd LLC 11 Jun 2026 - 12:57
1020 71.6.232.22 74 2 🇺🇸 United States CariNet, Inc. 11 Jun 2026 - 06:04

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.