AR

Abuse Radar Threat Feed

Sanitized threat intelligence from monitored infrastructure.

Abuse intelligence, cleaned for public use.

Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.

The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.

Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.

Latest signal2026-08-11 05:00 GMT+8
Unique records4477
Total detections7783
Active records1808
Last 24h147
Leak signals3759
Geo pending0
Total visitors1138
Current visitors2
3940Active signals

Attack Mix

Active detections grouped by public-safe category.

This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.

SSH attacks420
Mail brute/auth262
Leak trap3258
Other0

Country Signal Map

Approximate country placement from IP geolocation. Point size follows detection volume.

The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.

Live Threat Flow

Collector Health

  • Leak Trap Sensor 012026-08-11 05:00 GMT+8Live
  • Mail Sensor 012026-08-11 04:10 GMT+8Live
  • SSH Sensor 012026-08-11 02:16 GMT+8Live
  • Mail Sensor 022026-08-10 19:55 GMT+8Warm
  • SSH Sensor 022026-08-06 17:46 GMT+8Quiet
  • SSH Sensor 032026-08-06 14:44 GMT+8Quiet
  • SSH Sensor 042026-08-04 15:44 GMT+8Quiet

Latest Geo Signals

  • 219.248.65.30South Korea KRLeak trap address contacted · 2026-08-11 05:00 GMT+8
  • 218.1.185.88China CNLeak trap address contacted · 2026-08-11 04:35 GMT+8
  • 122.187.174.78India INLeak trap address contacted · 2026-08-11 04:35 GMT+8
  • 187.50.226.182Brazil BRLeak trap address contacted · 2026-08-11 04:15 GMT+8
  • 193.32.126.227France FRSuspicious mail authentication attempts · 2026-08-11 04:10 GMT+8
  • 75.80.69.106United States USLeak trap address contacted · 2026-08-11 03:10 GMT+8
  1. ChinaCN805
  2. South KoreaKR447
  3. IndiaIN413
  4. United StatesUS297
  5. Russian FederationRU292
  6. BrazilBR223
  7. NetherlandsNL145
  8. TaiwanTW144
  9. IranIR109
  10. SwedenSE101

Plain IP Blocklists

One IP per line, no reason, source, username, or raw log details.

Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.

Signal Ledger

The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.

IPReasonSeverityIP DetailFirst SeenLast SeenDetectionsFeed
Leak trap address contacted High Algeria (DZ)Optimum Telecom Algeria - Optimum Telecom Algeria 2026-05-20 23:55 GMT+82 months ago 2026-08-02 22:10 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Russian Federation (RU)LLC TRC FIORD 2026-05-26 11:20 GMT+82 months ago 2026-08-02 22:05 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium Russian Federation (RU)INSYS LLC 2026-08-02 22:05 GMT+88 days ago 2026-08-02 22:05 GMT+88 days ago 1 10/15/30d lists
Suspicious SSH authentication attempts High Indonesia (ID)Pt Centrin Utama 2026-05-08 14:53 GMT+83 months ago 2026-08-02 21:37 GMT+88 days ago 4 10/15/30d lists
Leak trap address contacted High South Korea (KR)Korea Telecom 2026-05-19 22:20 GMT+82 months ago 2026-08-02 21:20 GMT+88 days ago 3 10/15/30d lists
Suspicious SSH authentication attempts Medium Indonesia (ID)PT Telekomunikasi Indonesia 2026-08-02 20:47 GMT+88 days ago 2026-08-02 20:47 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium India (IN)Bharti Airtel Limited 2026-05-26 07:25 GMT+82 months ago 2026-08-02 20:30 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Hong Kong (HK)Pccw Ims Limited 2026-07-26 20:10 GMT+815 days ago 2026-08-02 20:10 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium Peru (PE)INTEGRATEL PERÚ S.A.A. 2026-05-25 03:40 GMT+82 months ago 2026-08-02 19:55 GMT+88 days ago 2 10/15/30d lists
Suspicious mail authentication attempts High Iran (IR)Iranian Research Organization for Science & Technology 2026-07-30 19:50 GMT+811 days ago 2026-08-02 19:55 GMT+88 days ago 7 10/15/30d lists
Suspicious mail authentication attempts High Iran (IR)Iranian Research Organization for Science & Technology 2026-07-30 19:50 GMT+811 days ago 2026-08-02 19:50 GMT+88 days ago 7 10/15/30d lists
Leak trap address contacted High United States (US)Cablevision Systems Corp. 2026-05-16 23:55 GMT+82 months ago 2026-08-02 19:45 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Russian Federation (RU)OOO NI 2026-08-02 19:45 GMT+88 days ago 2026-08-02 19:45 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium Afghanistan (AF)Government Communications Network 2026-06-07 00:25 GMT+82 months ago 2026-08-02 19:00 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium China (CN)China Unicom China169 Backbone 2026-08-02 18:40 GMT+88 days ago 2026-08-02 18:40 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium India (IN)Bharti Airtel Limited 2026-05-25 02:00 GMT+82 months ago 2026-08-02 18:40 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-08-02 18:35 GMT+88 days ago 2026-08-02 18:35 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium China (CN)China Telecom (Group) 2026-06-01 04:05 GMT+82 months ago 2026-08-02 18:35 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-08-02 18:30 GMT+88 days ago 2026-08-02 18:30 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-05-29 22:50 GMT+82 months ago 2026-08-02 18:10 GMT+88 days ago 2 10/15/30d lists
Suspicious SSH authentication attempts Medium Taiwan (TW)Chunghwa Telecom Co., Ltd. 2026-05-02 22:48 GMT+83 months ago 2026-08-02 17:42 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-08-02 17:35 GMT+88 days ago 2026-08-02 17:35 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-05-26 21:40 GMT+82 months ago 2026-08-02 17:35 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium Congo (CG)CONGO TELECOM 2026-07-02 02:25 GMT+81 month ago 2026-08-02 16:50 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium Taiwan (TW)Mobile Business Group 2026-08-02 15:45 GMT+88 days ago 2026-08-02 15:45 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium Kazakhstan (KZ)JSC Kazakhtelecom 2026-05-29 00:10 GMT+82 months ago 2026-08-02 15:45 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium United States (US)Cox Communications Inc. 2026-05-31 20:55 GMT+82 months ago 2026-08-02 15:35 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium China (CN)China Mobile Communications Corporation 2026-05-25 01:00 GMT+82 months ago 2026-08-02 15:35 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Russian Federation (RU)Region Svyaz Konsalt LLC 2026-05-24 20:55 GMT+82 months ago 2026-08-02 14:20 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium China (CN)China Mobile 2026-05-31 00:55 GMT+82 months ago 2026-08-02 14:05 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Taiwan (TW)Mobile Business Group 2026-08-02 13:35 GMT+88 days ago 2026-08-02 13:35 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-07-27 18:30 GMT+814 days ago 2026-08-02 13:30 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium China (CN)CHINANET BACKBONE 2026-05-27 23:30 GMT+82 months ago 2026-08-02 13:30 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium Russian Federation (RU)JSC ER-Telecom Holding 2026-08-02 13:05 GMT+88 days ago 2026-08-02 13:05 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium South Africa (ZA)Vox Telecom LTD 2026-05-28 07:55 GMT+82 months ago 2026-08-02 12:30 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-07-07 21:25 GMT+81 month ago 2026-08-02 12:30 GMT+88 days ago 2 10/15/30d lists
Suspicious SSH authentication attempts High Indonesia (ID)Neuviz Net 2026-06-19 21:06 GMT+81 month ago 2026-08-02 12:22 GMT+88 days ago 7 10/15/30d lists
Leak trap address contacted Medium China (CN)Hengyang 2026-05-29 03:15 GMT+82 months ago 2026-08-02 12:00 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium France (FR)OVH SAS 2026-08-02 12:00 GMT+88 days ago 2026-08-02 12:00 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium Russian Federation (RU)JSC Rde Unico 2026-05-25 13:55 GMT+82 months ago 2026-08-02 12:00 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Iraq (IQ)Hulum Almustakbal Company for Communication Engineering And Services LTD 2026-05-23 21:15 GMT+82 months ago 2026-08-02 11:35 GMT+88 days ago 4 10/15/30d lists
Leak trap address contacted Medium Japan (JP)NTT Docomo Business,inc. 2026-05-29 19:15 GMT+82 months ago 2026-08-02 10:50 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium South Korea (KR)Korea Telecom 2026-08-02 10:50 GMT+88 days ago 2026-08-02 10:50 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium Australia (AU)Anycast Holdings Pty LTD 2026-05-27 02:35 GMT+82 months ago 2026-08-02 10:20 GMT+88 days ago 2 10/15/30d lists
Leak trap address contacted Medium Sweden (SE)Bredband2 Ab 2026-08-02 10:20 GMT+88 days ago 2026-08-02 10:20 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium Colombia (CO)COLOMBIA TELECOMUNICACIONES S.A. ESP BIC 2026-05-24 12:50 GMT+82 months ago 2026-08-02 10:20 GMT+88 days ago 4 10/15/30d lists
Leak trap address contacted Medium China (CN)CHINANET BACKBONE 2026-08-02 10:05 GMT+88 days ago 2026-08-02 10:05 GMT+88 days ago 1 10/15/30d lists
Leak trap address contacted Medium China (CN)China Unicom China169 Backbone 2026-06-05 16:45 GMT+82 months ago 2026-08-02 10:05 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted Medium Taiwan (TW)Taiwan Mobile Co., Ltd. 2026-05-24 03:00 GMT+82 months ago 2026-08-02 10:05 GMT+88 days ago 3 10/15/30d lists
Leak trap address contacted High Afghanistan (AF)Government Communications Network 2026-05-18 20:50 GMT+82 months ago 2026-08-02 10:00 GMT+88 days ago 4 10/15/30d lists
Showing 50 of 1808 matched records. Page 15 of 37.