IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

40,668Tracked IPs
481,682Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
1381 85.192.49.91 74 2 🇫🇮 Finland H2nexus LTD 1 Aug 2026 - 00:32
1382 185.65.202.199 74 1 🇩🇪 Germany Baykov Ilya Sergeevich 1 Aug 2026 - 00:28
1383 172.234.218.245 74 1 🇺🇸 United States Akamai Technologies, Inc. 1 Aug 2026 - 00:28
1384 147.185.132.104 74 4 🇺🇸 United States Palo Alto Networks, Inc 1 Aug 2026 - 00:19
1385 203.159.90.217 74 4 🇳🇱 The Netherlands 1337 Services GmbH 1 Aug 2026 - 00:10
1386 170.64.134.89 74 1 🇦🇺 Australia DigitalOcean, LLC 31 Jul 2026 - 23:45
1387 147.185.132.245 74 1 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 23:33
1388 147.185.133.199 74 1 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 23:00
1389 51.116.175.137 74 2 🇩🇪 Germany Microsoft Azure Cloud (germanywestcentral) 31 Jul 2026 - 22:51
1390 8.211.46.83 74 2 🇩🇪 Germany Alibaba.com Singapore E-Commerce Private Limited 31 Jul 2026 - 22:37
1391 147.185.132.110 74 3 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 22:25
1392 185.180.141.9 74 1 🇺🇸 United States ICG 1 ZEN DFW 31 Jul 2026 - 22:24
1393 150.107.36.236 74 8 🇺🇸 United States Ucloud Information Technology (hk) Limited 31 Jul 2026 - 22:23
1394 154.197.57.208 74 1 🇺🇸 United States Ucloud Information Technology HK Limitedimited 31 Jul 2026 - 22:11
1395 147.185.133.220 74 1 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 22:03
1396 147.185.132.233 74 2 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 21:52
1397 118.194.248.142 74 1 🇰🇷 South Korea Ucloud Information Technology 31 Jul 2026 - 21:50
1398 45.156.87.252 74 4 🇳🇱 The Netherlands VMHeaven.io 31 Jul 2026 - 21:39
1399 147.185.133.111 74 3 🇺🇸 United States Palo Alto Networks, Inc 31 Jul 2026 - 21:32
1400 100.29.192.77 74 1 🇺🇸 United States AWS EC2 (us-east-1) 31 Jul 2026 - 21:19

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.