Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Collector Health
- Leak Trap Sensor 012026-08-11 06:15 GMT+8Live
- Mail Sensor 012026-08-11 04:10 GMT+8Live
- SSH Sensor 012026-08-11 02:16 GMT+8Live
- Mail Sensor 022026-08-10 19:55 GMT+8Warm
- SSH Sensor 022026-08-06 17:46 GMT+8Quiet
- SSH Sensor 032026-08-06 14:44 GMT+8Quiet
- SSH Sensor 042026-08-04 15:44 GMT+8Quiet
Latest Geo Signals
188.168.86.6Russian Federation RULeak trap address contacted · 2026-08-11 06:15 GMT+8103.252.168.4India INLeak trap address contacted · 2026-08-11 05:15 GMT+8154.146.238.122Morocco MALeak trap address contacted · 2026-08-11 05:05 GMT+8219.248.65.30South Korea KRLeak trap address contacted · 2026-08-11 05:00 GMT+8218.1.185.88China CNLeak trap address contacted · 2026-08-11 04:35 GMT+8122.187.174.78India INLeak trap address contacted · 2026-08-11 04:35 GMT+8
- ChinaCN805
- South KoreaKR447
- IndiaIN414
- United StatesUS297
- Russian FederationRU296
- BrazilBR223
- NetherlandsNL145
- TaiwanTW144
- IranIR109
- SwedenSE101
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | Senegal (SN)SONATEL-AS Autonomous System | 2026-08-02 01:10 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Unicom Beijing Province Network | 2026-08-02 01:05 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)Cloud Computing Corporation | 2026-08-02 01:05 GMT+89 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)TELEFÔNICA BRASIL S.A | 2026-08-01 23:55 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-08-01 23:50 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)TELEFÔNICA BRASIL S.A | 2026-08-01 23:50 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Nepal (NP)C G Communications LTD | 2026-08-01 23:25 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Sweden (SE)Telenor Sverige Ab | 2026-08-01 23:25 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Mobile Communications Corporation | 2026-08-01 23:15 GMT+89 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | High | United States (US)HostPapa | 2026-08-01 22:55 GMT+89 days ago | 6 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-08-01 22:35 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Israel (IL)Partner Communications Ltd. | 2026-08-01 22:35 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-01 22:15 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-08-01 22:00 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)Pjsc Vimpelcom | 2026-08-01 20:40 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-08-01 20:35 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Peru (PE)INTEGRATEL PERÚ S.A.A. | 2026-08-01 20:15 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Sweden (SE)Globalconnect Ab | 2026-08-01 20:15 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Hong Kong (HK)Pccw Ims Limited | 2026-08-01 20:15 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Bangladesh (BD)Extentit Solution Limited | 2026-08-01 20:15 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Kazakhstan (KZ)JSC Transtelecom | 2026-08-01 20:10 GMT+89 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-08-01 20:00 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | High | Taiwan (TW)Mobile Business Group | 2026-08-01 20:00 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Sk Broadband Co LTD | 2026-08-01 19:25 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)INSYS LLC | 2026-08-01 19:20 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Viet Nam (VN)Fpt Telecom Company | 2026-08-01 19:05 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-01 18:55 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Mobile Communications Corporation | 2026-08-01 18:55 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Afghanistan (AF)Government Communications Network | 2026-08-01 18:45 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Chunghwa Telecom Co., Ltd. | 2026-08-01 18:45 GMT+89 days ago | 2 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Thailand (TH)Triple T Broadband Public Company Limited | 2026-08-01 18:30 GMT+89 days ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | France (FR)Free SAS | 2026-08-01 18:14 GMT+89 days ago | 7 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)TELEFÔNICA BRASIL S.A | 2026-08-01 18:10 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United Kingdom (GB)Virgin Media Limited | 2026-08-01 17:10 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)TELEFÔNICA BRASIL S.A | 2026-08-01 17:10 GMT+89 days ago | 2 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Iran (IR)Iranian Research Organization for Science & Technology | 2026-08-01 17:10 GMT+89 days ago | 7 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)Pjsc Rostelecom | 2026-08-01 17:05 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Mobile | 2026-08-01 17:05 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-08-01 17:05 GMT+89 days ago | 3 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Iran (IR)Iranian Research Organization for Science & Technology | 2026-08-01 17:05 GMT+89 days ago | 7 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Norway (NO)Telia Norge AS | 2026-08-01 16:55 GMT+89 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-01 16:55 GMT+89 days ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Iran (IR)Iranian Research Organization for Science & Technology | 2026-08-01 16:45 GMT+89 days ago | 7 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Kazakhstan (KZ)JSC Kazakhtelecom | 2026-08-01 15:40 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-08-01 15:40 GMT+89 days ago | 2 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | United States (US)Oracle Corporation | 2026-08-01 15:08 GMT+89 days ago | 8 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)CABLE ONE, INC. | 2026-08-01 15:05 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-08-01 15:05 GMT+89 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-01 15:00 GMT+89 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Hong Kong (HK)Pccw Ims Limited | 2026-08-01 13:40 GMT+89 days ago | 3 | 10/15/30d lists |