IP Reputation Tracker

Real-time IP threat intelligence. Automated detection, aggregation and reporting of malicious IP activity across monitored infrastructure.

19,928Tracked IPs
113,391Threat Reports

Worst Offenders — Last 3 Days

# IP Threat Level Reports Type Country Org Last Seen
1741 58.20.201.4 72 1 🇨🇳 China CNC Group 13 Jun 2026 - 01:51
1742 147.185.132.80 72 2 🇺🇸 United States Palo Alto Networks, Inc 13 Jun 2026 - 01:49
1743 122.114.12.133 72 1 🇨🇳 China Zhengzhou GIANT Computer Network Technology Co., Ltd 13 Jun 2026 - 01:46
1744 129.153.25.174 72 2 🇺🇸 United States Oracle Cloud Infrastructure (us-ashburn-1) 13 Jun 2026 - 01:45
1745 91.92.40.176 72 1 🇧🇬 Bulgaria Bullet Group LTD 13 Jun 2026 - 01:43
1746 159.255.36.169 72 1 🇺🇸 United States First Server Limited 13 Jun 2026 - 01:41
1747 118.193.77.58 72 1 🇺🇸 United States Ucloud Information Technology 13 Jun 2026 - 01:39
1748 14.103.127.75 72 1 🇨🇳 China China Internet Network Information Center 13 Jun 2026 - 01:39
1749 198.199.123.141 72 1 🇺🇸 United States DigitalOcean, LLC 13 Jun 2026 - 01:06
1750 193.169.240.151 72 3 🇺🇦 Ukraine SERVER.UA LLC 13 Jun 2026 - 01:05
1751 78.111.75.47 72 1 🇩🇪 Germany GermanVPS CGN 13 Jun 2026 - 01:03
1752 34.175.118.185 72 1 🇪🇸 Spain Google Cloud (europe-southwest1) 13 Jun 2026 - 01:00
1753 103.189.235.114 72 1 🇸🇬 Singapore Cloud Host Pte Ltd 13 Jun 2026 - 00:59
1754 147.185.133.7 72 3 🇺🇸 United States Palo Alto Networks, Inc 13 Jun 2026 - 00:54
1755 121.31.210.47 72 1 🇨🇳 China AS4837 CHINA UNICOM China169 Backbone 13 Jun 2026 - 00:43
1756 62.60.130.227 72 3 🇮🇷 Iran UAB Host Baltic 13 Jun 2026 - 00:40
1757 45.148.10.5 72 2 BPH 🇳🇱 The Netherlands Techoff SRV Limited 13 Jun 2026 - 00:40
1758 58.69.56.44 72 1 🇵🇭 Philippines Philippine Long Distance Telephone Company 13 Jun 2026 - 00:36
1759 69.5.7.218 72 2 🇮🇩 Indonesia Byteplus 13 Jun 2026 - 00:36
1760 36.92.246.14 72 1 🇮🇩 Indonesia Temporary 13 Jun 2026 - 00:34

About

UnwantedIP aggregates block events from multiple servers running the EagleEye security stack — WordPress firewalls, SSH honeypots, and web application scanners. Each detected attack is enriched with reverse DNS, geolocation, and ASN data and stored as a permanent threat record.

A REST API allows external sources to query IP reputation data and submit new threat reports. Search any IP address using the URL pattern /ip/x.x.x.x.