Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Collector Health
- Leak Trap Sensor 012026-08-10 23:25 GMT+8Live
- Mail Sensor 012026-08-10 20:05 GMT+8Live
- Mail Sensor 022026-08-10 19:55 GMT+8Live
- SSH Sensor 012026-08-10 13:14 GMT+8Warm
- SSH Sensor 022026-08-06 17:46 GMT+8Quiet
- SSH Sensor 032026-08-06 14:44 GMT+8Quiet
- SSH Sensor 042026-08-04 15:44 GMT+8Quiet
Latest Geo Signals
49.125.203.167Malaysia MYLeak trap address contacted · 2026-08-10 23:25 GMT+8218.156.93.206South Korea KRLeak trap address contacted · 2026-08-10 22:30 GMT+8192.72.56.178Taiwan TWLeak trap address contacted · 2026-08-10 21:15 GMT+8165.220.169.113United Kingdom GBLeak trap address contacted · 2026-08-10 21:05 GMT+8190.90.79.28Colombia COLeak trap address contacted · 2026-08-10 21:00 GMT+8222.220.104.25China CNLeak trap address contacted · 2026-08-10 21:00 GMT+8
- ChinaCN802
- South KoreaKR441
- IndiaIN410
- United StatesUS294
- Russian FederationRU292
- BrazilBR222
- NetherlandsNL145
- TaiwanTW144
- IranIR109
- SwedenSE101
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | Brazil (BR)AS18881 - TELEFONICA BRASIL S.A | 2026-08-05 10:10 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Australia (AU)TPG Telecom Limited | 2026-08-05 10:00 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-05 09:50 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-05 09:45 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Comcast Cable Communications, LLC | 2026-08-05 09:00 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Microsoft Corporation | 2026-08-05 09:00 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)HeiLongJiang Mobile Communication Company Limited | 2026-08-05 08:35 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Argentina (AR)Telecom Argentina S.A. | 2026-08-05 08:05 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | High | Peru (PE)AS6147 - INTEGRATEL PERU S.A.A. | 2026-08-05 07:55 GMT+85 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)PJSC MegaFon | 2026-08-05 06:55 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Zenlayer Inc | 2026-08-05 06:20 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)AS18881 - TELEFONICA BRASIL S.A | 2026-08-05 06:05 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Sweden (SE)Bredband2 AB | 2026-08-05 05:55 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-05 05:45 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Comcast Cable Communications, LLC | 2026-08-05 05:45 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | High | India (IN)DISHAWAVES INFONET PVT. LTD | 2026-08-05 05:45 GMT+85 days ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-08-05 05:15 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)OOO NI | 2026-08-05 04:35 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINANET SiChuan Telecom Internet Data Center | 2026-08-05 04:20 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | South Korea (KR)Korea Telecom | 2026-08-05 03:35 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | Iraq (IQ)IQ Networks for Data and Internet Services Ltd | 2026-08-05 03:35 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | High | Brazil (BR)V tal | 2026-08-05 03:35 GMT+85 days ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Italy (IT)EOLO S.p.A. | 2026-08-05 02:48 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Bulgaria (BG)BG-KARNOBATNET ET VESELIN JELQZKOV | 2026-08-05 02:40 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | Russian Federation (RU)JSC ER-Telecom Holding | 2026-08-05 01:50 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-05 01:45 GMT+85 days ago | 3 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | Indonesia (ID)PT Netciti Persada | 2026-08-05 01:42 GMT+85 days ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-05 01:20 GMT+85 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Colombia (CO)Telmex Colombia S.A. | 2026-08-05 01:20 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | High | Brazil (BR)AS18881 - TELEFONICA BRASIL S.A | 2026-08-05 00:25 GMT+85 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | High | United States (US)Comcast Cable Communications, LLC | 2026-08-05 00:10 GMT+85 days ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CMNET-V4henan-AS-AP - Henan Mobile Communications Co.,Ltd | 2026-08-05 00:10 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Ethiopia (ET)Ethio Telecom - Ethio Telecom | 2026-08-04 23:40 GMT+85 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Côte d'Ivoire (CI)DEDIROOM-LLC DEDIROOM LLC | 2026-08-04 23:20 GMT+86 days ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Slovenia (SI)VPS Dedicated LLC | 2026-08-04 23:00 GMT+86 days ago | 7 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Charter Communications Inc | 2026-08-04 22:50 GMT+86 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Netherlands (NL)KPN B.V. | 2026-08-04 22:50 GMT+86 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)PJSC MegaFon | 2026-08-04 22:35 GMT+86 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | South Korea (KR)Korea Telecom | 2026-08-04 22:30 GMT+86 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)V tal | 2026-08-04 22:00 GMT+86 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Viet Nam (VN)Viettel Group | 2026-08-04 21:35 GMT+86 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Far EastTone Telecommunication Co., Ltd. | 2026-08-04 21:30 GMT+86 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-04 21:20 GMT+86 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-04 21:00 GMT+86 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | India (IN)BHARTI Airtel Ltd. | 2026-08-04 20:50 GMT+86 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Sweden (SE)Bahnhof AB | 2026-08-04 20:15 GMT+86 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-04 20:15 GMT+86 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-04 20:05 GMT+86 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | South Korea (KR)Korea Telecom | 2026-08-04 20:05 GMT+86 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINANET Liaoning province Dalian MAN network | 2026-08-04 20:00 GMT+86 days ago | 2 | 10/15/30d lists |