Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Latest signal2026-08-10 13:55 GMT+8
Unique records4461
Total detections7737
Active records1791
Last 24h163
Leak signals3744
Geo pending0
Total visitors1132
Current visitors1
3898Active signals
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
SSH attacks427
Mail brute/auth254
Leak trap3217
Other0
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Live Threat Flow
Collector Health
- Leak Trap Sensor 012026-08-10 13:55 GMT+8Live
- SSH Sensor 012026-08-10 13:14 GMT+8Live
- Mail Sensor 012026-08-09 19:45 GMT+8Warm
- Mail Sensor 022026-08-09 17:20 GMT+8Warm
- SSH Sensor 022026-08-06 17:46 GMT+8Quiet
- SSH Sensor 032026-08-06 14:44 GMT+8Quiet
- SSH Sensor 042026-08-04 15:44 GMT+8Quiet
Latest Geo Signals
24.234.225.76United States USLeak trap address contacted · 2026-08-10 13:55 GMT+8176.195.31.118Russian Federation RULeak trap address contacted · 2026-08-10 13:55 GMT+8111.70.32.8Taiwan TWLeak trap address contacted · 2026-08-10 13:45 GMT+8163.245.187.130United States USLeak trap address contacted · 2026-08-10 13:45 GMT+8212.73.52.194Spain ESSuspicious SSH authentication attempts · 2026-08-10 13:14 GMT+8111.70.23.238Taiwan TWLeak trap address contacted · 2026-08-10 13:05 GMT+8
- ChinaCN806
- South KoreaKR437
- IndiaIN410
- United StatesUS296
- Russian FederationRU291
- BrazilBR222
- TaiwanTW143
- NetherlandsNL130
- IranIR117
- SwedenSE101
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | Singapore (SG)Tencent Building, Kejizhongyi Avenue | 2026-08-09 20:30 GMT+818 hours ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Netherlands (NL)KOI CLOUD SERVICES Pty Ltd | 2026-08-09 19:45 GMT+819 hours ago | 8 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Indonesia (ID)PT Indo Telemedia Solusi | 2026-08-09 19:25 GMT+819 hours ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)PJSC MegaFon | 2026-08-09 19:20 GMT+819 hours ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | Critical | Netherlands (NL)KOI CLOUD SERVICES Pty Ltd | 2026-08-09 17:20 GMT+821 hours ago | 9 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Viet Nam (VN)Viettel Group | 2026-08-09 17:05 GMT+822 hours ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Netherlands (NL)KOI CLOUD SERVICES Pty Ltd | 2026-08-09 17:00 GMT+822 hours ago | 8 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Unicom Beijing Province Network | 2026-08-09 16:50 GMT+822 hours ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Netherlands (NL)KOI CLOUD SERVICES Pty Ltd | 2026-08-09 16:50 GMT+822 hours ago | 7 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Netherlands (NL)KOI CLOUD SERVICES Pty Ltd | 2026-08-09 16:35 GMT+822 hours ago | 7 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)taiwanmobile-as - Taiwan Mobile Co., Ltd. | 2026-08-09 14:50 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Malaysia (MY)DiGi Telecommunications Sdn. Bhd. | 2026-08-09 14:50 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-09 14:20 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious mail authentication attempts | High | Netherlands (NL)KOI CLOUD SERVICES Pty Ltd | 2026-08-09 14:10 GMT+81 day ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | High | Australia (AU)TPG Telecom Limited | 2026-08-09 13:50 GMT+81 day ago | 4 | 10/15/30d lists | |
| Suspicious mail authentication attempts | Medium | Romania (RO)M247 Europe SRL | 2026-08-09 13:45 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | High | United States (US)Comcast Cable Communications, LLC | 2026-08-09 13:05 GMT+81 day ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Seokyung Cable Television Co.. Ltd. | 2026-08-09 13:00 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | High | Brazil (BR)AS18881 - TELEFONICA BRASIL S.A | 2026-08-09 12:55 GMT+81 day ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)JSC RDE Unico | 2026-08-09 12:15 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-08-09 11:30 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Iraq (IQ)HulumTele Hulum Almustakbal Company for Communication Engineering and Services Ltd | 2026-08-09 11:20 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-09 09:45 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Cox Communications Inc. | 2026-08-09 09:45 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Taiwan Fixed Network, Telco and Network Service Provider. | 2026-08-09 09:05 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)V tal | 2026-08-09 08:40 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)MGW Telephone Company, Inc. | 2026-08-09 08:15 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Hong Kong (HK)PCCW IMS Ltd PCCW Business Internet Access | 2026-08-09 08:05 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | High | China (CN)No.31,Jin-rong Street | 2026-08-09 06:40 GMT+81 day ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | High | Taiwan (TW)Far EastTone Telecommunication Co., Ltd. | 2026-08-09 06:35 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-08-09 06:35 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-09 06:15 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)MAXnet Systems Ltd. | 2026-08-09 06:10 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Israel (IL)Pelephone Communications Ltd. | 2026-08-09 06:10 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-09 06:05 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINA169-Backbone - CHINA UNICOM China169 Backbone | 2026-08-09 06:00 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Australia (AU)TPG Telecom Limited | 2026-08-09 05:45 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-09 05:15 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Japan (JP)Asahi Net | 2026-08-09 05:10 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Ethiopia (ET)Ethio Telecom - Ethio Telecom | 2026-08-09 05:10 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-09 03:45 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Poland (PL)Marcin Ciecierski trading as NEW CONNECT | 2026-08-09 02:55 GMT+81 day ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Iraq (IQ)HulumTele Hulum Almustakbal Company for Communication Engineering and Services Ltd | 2026-08-09 02:45 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-09 02:30 GMT+81 day ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | South Korea (KR)LGTELECOM-AS-KR-KR - LGTELECOM | 2026-08-09 02:15 GMT+81 day ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-09 01:50 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-09 01:25 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | Mexico (MX)AS8151 - UNINET | 2026-08-09 00:55 GMT+81 day ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-09 00:35 GMT+81 day ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)PJSC MegaFon | 2026-08-09 00:15 GMT+81 day ago | 1 | 10/15/30d lists |
Showing 50 of 1791 matched records. Page 2 of 36.