Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Latest signal2026-06-13 02:04 GMT+8
Unique records3261
Total detections3995
Active records3128
Last 24h30
Leak signals2845
Geo pending0
Total visitors241
Current visitors1
3862Active signals
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
SSH attacks592
Mail brute/auth47
Leak trap3223
Other0
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Live Threat Flow
Collector Health
- SSH Sensor 012026-06-13 02:04 GMT+8Live
- Leak Trap Sensor 012026-06-13 00:40 GMT+8Live
- SSH Sensor 022026-06-13 00:14 GMT+8Live
- SSH Sensor 032026-06-12 22:19 GMT+8Live
- Mail Sensor 012026-06-12 04:40 GMT+8Warm
- SSH Sensor 042026-06-11 23:22 GMT+8Quiet
- Mail Sensor 022026-06-11 10:15 GMT+8Quiet
Latest Geo Signals
122.228.231.146China CNSuspicious SSH authentication attempts · 2026-06-13 02:04 GMT+823.175.248.21United States USLeak trap address contacted · 2026-06-13 00:40 GMT+8223.104.82.140China CNSuspicious SSH authentication attempts · 2026-06-13 00:14 GMT+895.89.149.179Germany DESuspicious SSH authentication attempts · 2026-06-12 22:19 GMT+891.92.241.54Netherlands NLLeak trap address contacted · 2026-06-12 20:35 GMT+8115.231.40.125China CNSuspicious SSH authentication attempts · 2026-06-12 20:27 GMT+8
- ChinaCN924
- IndiaIN641
- Republic of KoreaKR326
- RussiaRU235
- United StatesUS216
- BrazilBR172
- TaiwanTW115
- NetherlandsNL113
- MalaysiaMY100
- SwedenSE78
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | United States (US)Zito Media, L.P. | 2026-05-27 04:20 GMT+816 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-05-27 04:15 GMT+816 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-05-27 04:15 GMT+816 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-05-27 04:10 GMT+816 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Thailand (TH)TRUE INTERNET CORPORATION CO. LTD. | 2026-05-27 04:10 GMT+816 days ago | 1 | 30d list only | |
| Leak trap address contacted | High | United States (US)Charter Communications INC | 2026-05-27 04:00 GMT+816 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | Sweden (SE)Globalconnect Ab | 2026-05-27 03:55 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Oracle Corporation | 2026-05-27 03:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Afghanistan (AF)Government Communications Network | 2026-05-27 03:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Zimbabwe (ZW)Telone Pvt LTD | 2026-05-27 03:35 GMT+817 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)ONEOTT INTERTAINMENT LIMITED | 2026-05-27 03:25 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Unicom China1 Backbone | 2026-05-27 03:15 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Ivory Coast (CI)Orange C te D ivoire | 2026-05-27 03:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Australia (AU)VOCUS PTY LTD | 2026-05-27 03:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile Communications Corporation | 2026-05-27 03:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)Chinanet | 2026-05-27 02:55 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Australia (AU)Anycast Holdings Pty LTD | 2026-05-27 02:35 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Brazil (BR)Edge Telecom Ltda | 2026-05-27 02:25 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Malaysia (MY)Digi Telecommunications Sdn Bhd., Digi Internet Exchange | 2026-05-27 02:25 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-05-27 02:25 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-05-27 02:15 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Malaysia (MY)Digi Telecommunications Sdn Bhd., Digi Internet Exchange | 2026-05-27 01:55 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Afghanistan (AF)Government Communications Network | 2026-05-27 01:55 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Kenya (KE)Accesskenya Group LTD Is An ISP Serving | 2026-05-27 01:45 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Russia (RU)JSC Elektrosvyaz | 2026-05-27 01:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | United States (US)Protek Communications, LLC | 2026-05-27 01:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Brazil (BR)VERO S.A | 2026-05-27 01:35 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Iraq (IQ)Hulum Almustakbal Company for Communication Engineering And Services LTD | 2026-05-27 01:30 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-05-27 01:30 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Brazil (BR)BRSULNET TELECOM LTDA | 2026-05-27 01:15 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-05-27 01:10 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-05-27 01:10 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile Communications Corporation | 2026-05-27 01:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Iraq (IQ)Hulum Almustakbal Company for Communication Engineering And Services LTD | 2026-05-27 01:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)No. 1,jin rong Street | 2026-05-27 01:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Malaysia (MY)Digi Telecommunications Sdn Bhd., Digi Internet Exchange | 2026-05-27 01:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Sweden (SE)Telia Company Ab | 2026-05-27 00:55 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)No. 1,jin rong Street | 2026-05-27 00:50 GMT+817 days ago | 1 | 30d list only | |
| Suspicious SSH authentication attempts | Low | China (CN)China Mobile Communications Corporation | 2026-05-27 00:48 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Korea (KR)Korea Telecom | 2026-05-27 00:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile | 2026-05-27 00:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Brazil (BR)BRMOM CONSTRUINDO CONEXOES LTDA | 2026-05-27 00:40 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | New Zealand (NZ)Spark New Zealand Trading Limited | 2026-05-27 00:35 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Russia (RU)Interra Telecommunications Group, Ltd. | 2026-05-27 00:35 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Kazakhstan (KZ)JSC Kazakhtelecom | 2026-05-27 00:20 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Republic of Lithuania (LT)GLOBAL CONNECTIVITY SOLUTIONS LLP | 2026-05-27 00:20 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-05-27 00:15 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Sweden (SE)Telia Company Ab | 2026-05-27 00:10 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Israel (IL)Partner Communications Ltd. | 2026-05-27 00:00 GMT+817 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Colombia (CO)Telmex Colombia S.A. | 2026-05-26 23:55 GMT+817 days ago | 1 | 30d list only |
Showing 50 of 3128 matched records. Page 32 of 63.