Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Latest signal2026-06-11 18:55 GMT+8
Unique records3252
Total detections3968
Active records3136
Last 24h28
Leak signals2843
Geo pending0
Total visitors235
Current visitors1
3852Active signals
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
SSH attacks577
Mail brute/auth46
Leak trap3229
Other0
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Live Threat Flow
Collector Health
- Leak Trap Sensor 012026-06-11 18:55 GMT+8Live
- SSH Sensor 012026-06-11 13:45 GMT+8Live
- SSH Sensor 022026-06-11 12:13 GMT+8Warm
- Mail Sensor 012026-06-11 10:15 GMT+8Warm
- SSH Sensor 032026-06-11 09:54 GMT+8Warm
- SSH Sensor 042026-06-11 07:39 GMT+8Warm
- Mail Sensor 022026-06-10 12:55 GMT+8Quiet
Latest Geo Signals
45.80.185.112Costa Rica CRLeak trap address contacted · 2026-06-11 18:55 GMT+8167.71.239.213India INSuspicious SSH authentication attempts · 2026-06-11 13:45 GMT+8114.247.140.114China CNSuspicious SSH authentication attempts · 2026-06-11 13:37 GMT+8114.35.183.71Taiwan TWSuspicious SSH authentication attempts · 2026-06-11 12:13 GMT+845.80.185.37Costa Rica CRLeak trap address contacted · 2026-06-11 12:00 GMT+877.90.185.239Germany DESuspicious mail authentication attempts · 2026-06-11 10:15 GMT+8
- ChinaCN922
- IndiaIN642
- Republic of KoreaKR324
- RussiaRU235
- United StatesUS215
- BrazilBR171
- NetherlandsNL113
- TaiwanTW112
- MalaysiaMY100
- SwedenSE78
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | Costa Rica (CR)Datacamp Limited | 2026-06-11 18:55 GMT+827 minutes ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | India (IN)Digitalocean, LLC | 2026-06-11 13:45 GMT+85 hours ago | 4 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Unicom Beijing Province Network | 2026-06-11 13:37 GMT+85 hours ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | Taiwan (TW)Chunghwa Telecom Co., Ltd. | 2026-06-11 12:13 GMT+87 hours ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Costa Rica (CR)Datacamp Limited | 2026-06-11 12:00 GMT+87 hours ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Germany (DE)Limited Network LTD | 2026-06-11 10:15 GMT+89 hours ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Vietnam (VN)Sai Gon Postel Corporation | 2026-06-11 09:55 GMT+89 hours ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Ireland (IE)Three Ireland hutchison Limited | 2026-06-11 07:39 GMT+811 hours ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Hong Kong (HK)Tele Asia Limited | 2026-06-11 06:00 GMT+813 hours ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Indonesia (ID)Telekomunikasi Indonesia pt | 2026-06-11 00:48 GMT+818 hours ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)No. 1,jin rong Street | 2026-06-10 23:40 GMT+819 hours ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Unicom Beijing Province Network | 2026-06-10 22:05 GMT+821 hours ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Unicom China1 Backbone | 2026-06-10 21:13 GMT+822 hours ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Republic of Korea (KR)Korea Telecom | 2026-06-10 19:59 GMT+823 hours ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Portugal (PT)NOS COMUNICACOES, S.A. | 2026-06-10 19:41 GMT+823 hours ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Taiwan (TW)Dada Broadband Ltd. | 2026-06-10 18:55 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Netherlands (NL)Church of Cyberology | 2026-06-10 17:45 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)V Tal | 2026-06-10 16:50 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Singapore (SG)Alibaba us Technology Co., Ltd. | 2026-06-10 15:10 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Unicom Beijing Province Network | 2026-06-10 14:57 GMT+81 day ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)Chinanet | 2026-06-10 13:40 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)No. 1,jin rong Street | 2026-06-10 13:40 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | Medium | Brazil (BR)Webplus Brasil Ltda Me | 2026-06-10 12:55 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | China (CN)No. 1,jin rong Street | 2026-06-10 12:17 GMT+81 day ago | 4 | 10/15/30d lists | |
| Suspicious mail authentication attempts | Medium | Netherlands (NL)Limited Network LTD | 2026-06-10 11:25 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)No. 1,jin rong Street | 2026-06-10 10:55 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)TELEF NICA BRASIL S.A | 2026-06-10 09:15 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Alibaba us Technology Co., Ltd. | 2026-06-10 09:10 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Vietnam (VN)Fpt Telecom Company | 2026-06-10 07:15 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Republic of Korea (KR)Korea Telecom | 2026-06-10 07:03 GMT+81 day ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Unicom China1 Backbone | 2026-06-10 06:31 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | China (CN)China Mobile Communications Corporation | 2026-06-10 02:52 GMT+81 day ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Mobile Communications Corporation | 2026-06-10 02:40 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Unicom China1 Backbone | 2026-06-10 02:32 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)Idc, China Telecommunications Corporation | 2026-06-10 01:50 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Ukraine (UA)PRIVATE JOINT STOCK COMPANY FARLEP INVEST | 2026-06-10 01:30 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Mobile | 2026-06-10 00:50 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-06-10 00:50 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | Thailand (TH)Siamdata Communication CO.,LTD. | 2026-06-09 23:58 GMT+81 day ago | 5 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | China (CN)China Mobile | 2026-06-09 22:42 GMT+81 day ago | 4 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | Indonesia (ID)Pt Bali Towerindo Sentra | 2026-06-09 21:40 GMT+81 day ago | 4 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Vietnam (VN)Fpt Telecom Company | 2026-06-09 20:14 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-06-09 19:00 GMT+82 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Japan (JP)Amazon.com, Inc. | 2026-06-09 18:45 GMT+82 days ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Mobile Communications Corporation | 2026-06-09 15:52 GMT+82 days ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)Chinanet | 2026-06-09 15:01 GMT+82 days ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Indonesia (ID)Pt Netciti Persada | 2026-06-09 14:09 GMT+82 days ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)Chinanet | 2026-06-09 13:21 GMT+82 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Sweden (SE)NODE HOST LIMITED | 2026-06-09 12:30 GMT+82 days ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Vietnam (VN)Vnpt Corp | 2026-06-09 11:49 GMT+82 days ago | 2 | 10/15/30d lists |
Showing 50 of 3136 matched records. Page 1 of 63.