Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Latest signal2026-08-12 00:45 GMT+8
Unique records4494
Total detections7839
Active records1826
Last 24h169
Leak signals3774
Geo pending0
Total visitors1151
Current visitors1
3989Active signals
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
SSH attacks408
Mail brute/auth272
Leak trap3309
Other0
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Live Threat Flow
Collector Health
- Leak Trap Sensor 012026-08-12 00:45 GMT+8Live
- Mail Sensor 012026-08-11 19:55 GMT+8Live
- Mail Sensor 022026-08-11 19:55 GMT+8Live
- SSH Sensor 012026-08-11 16:58 GMT+8Warm
- SSH Sensor 022026-08-11 12:48 GMT+8Warm
- SSH Sensor 032026-08-11 10:49 GMT+8Warm
- SSH Sensor 042026-08-11 10:45 GMT+8Warm
Latest Geo Signals
201.28.237.90Brazil BRLeak trap address contacted · 2026-08-12 00:45 GMT+8202.84.34.85Bangladesh BDLeak trap address contacted · 2026-08-11 21:40 GMT+8151.72.37.1Italy ITLeak trap address contacted · 2026-08-11 21:40 GMT+8154.14.144.90Hungary HULeak trap address contacted · 2026-08-11 20:40 GMT+8103.50.5.94India INLeak trap address contacted · 2026-08-11 20:40 GMT+82.55.126.88Israel ILLeak trap address contacted · 2026-08-11 20:35 GMT+8
- ChinaCN789
- South KoreaKR453
- IndiaIN414
- United StatesUS300
- Russian FederationRU299
- BrazilBR228
- NetherlandsNL180
- TaiwanTW148
- SwedenSE102
- IndonesiaID85
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | Syrian Arab Republic (SY)Rcell LLC | 2026-07-18 05:20 GMT+824 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | United States (US)Verizon Business | 2026-07-18 05:20 GMT+824 days ago | 4 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-07-18 05:20 GMT+824 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | United States (US)Charter Communications Inc | 2026-07-18 05:20 GMT+824 days ago | 3 | 30d list only | |
| Suspicious SSH authentication attempts | Medium | China (CN)China Mobile | 2026-07-18 04:30 GMT+824 days ago | 3 | 30d list only | |
| Suspicious SSH authentication attempts | Medium | China (CN)CHINANET BACKBONE | 2026-07-18 04:29 GMT+824 days ago | 5 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-07-18 04:00 GMT+824 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | Russian Federation (RU)Omskie Kabelnye Seti Ltd. | 2026-07-17 23:40 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile | 2026-07-17 23:40 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Malaysia (MY)Digi Telecommunications Sdn Bhd., Digi Internet Exchange | 2026-07-17 23:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 23:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 23:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | Russian Federation (RU)Pjsc Megafon | 2026-07-17 23:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | United States (US)Cox Communications Inc. | 2026-07-17 23:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 22:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile Communications Corporation | 2026-07-17 22:20 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-07-17 22:20 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | Brazil (BR)TELEFÔNICA BRASIL S.A | 2026-07-17 21:05 GMT+825 days ago | 4 | 30d list only | |
| Leak trap address contacted | Medium | Malaysia (MY)Digi Telecommunications Sdn Bhd., Digi Internet Exchange | 2026-07-17 21:05 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Bosnia and Herzegovina (BA)Bh Telecom D.D. Sarajevo | 2026-07-17 21:05 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Unicom China169 Backbone | 2026-07-17 21:05 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | Iran (IR)Azarakhsh Ava-e Ahvaz Co | 2026-07-17 21:05 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Colombia (CO)SOMOS NETWORKS COLOMBIA S.A.S. BIC | 2026-07-17 21:05 GMT+825 days ago | 4 | 30d list only | |
| Leak trap address contacted | Medium | Russian Federation (RU)Infolada LTD | 2026-07-17 21:05 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Mozambique (MZ)Movitel, SA | 2026-07-17 21:05 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | Ethiopia (ET)Ethio Telecom | 2026-07-17 20:00 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-07-17 19:50 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Unicom Beijing Province Network | 2026-07-17 19:50 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Taiwan (TW)Taiwan Mobile Co., Ltd. | 2026-07-17 19:35 GMT+825 days ago | 4 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 19:35 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-07-17 19:35 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | Australia (AU)Tpg Internet Pty LTD | 2026-07-17 19:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-07-17 19:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Brazil (BR)Oracle Corporation | 2026-07-17 19:35 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-07-17 19:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile | 2026-07-17 19:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Limited | 2026-07-17 19:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | Taiwan (TW)Mobile Business Group | 2026-07-17 19:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | Russian Federation (RU)INSYS LLC | 2026-07-17 18:30 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 17:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | Sweden (SE)Bredband2 Ab | 2026-07-17 17:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | Malaysia (MY)Celcom Axiata Berhad | 2026-07-17 17:35 GMT+825 days ago | 1 | 30d list only | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-07-17 17:35 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | United States (US)Charter Communications Inc | 2026-07-17 17:35 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | Spain (ES)TELEFONICA DE ESPANA S.A.U. | 2026-07-17 17:30 GMT+825 days ago | 1 | 30d list only | |
| Suspicious SSH authentication attempts | Low | South Korea (KR)Sk Telecom | 2026-07-17 17:06 GMT+825 days ago | 1 | 30d list only | |
| Suspicious SSH authentication attempts | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 16:35 GMT+825 days ago | 3 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)CHINANET BACKBONE | 2026-07-17 16:30 GMT+825 days ago | 4 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Unicom China169 Backbone | 2026-07-17 16:15 GMT+825 days ago | 2 | 30d list only | |
| Leak trap address contacted | Medium | China (CN)China Mobile | 2026-07-17 16:00 GMT+825 days ago | 1 | 30d list only |
Showing 50 of 1826 matched records. Page 34 of 37.