Abuse intelligence, cleaned for public use.
Collector signals are normalized into a public-safe feed with source details, usernames, hostnames, and raw logs removed.
The Abuse Radar Threat Feed publishes sanitized SSH abuse, mail brute force, credential guessing, and leak trap signals for defenders who need current IP threat intelligence without exposing private infrastructure logs. IP context can be checked against the AbuseIPDB reference while this page keeps bulk IP lookup links out of the table to avoid noisy external-link counts.
Use the sections below to check an IP, review active signals, download blocklists, and integrate the public JSON API.
Latest signal2026-08-10 20:05 GMT+8
Unique records4465
Total detections7757
Active records1795
Last 24h178
Leak signals3748
Geo pending0
Total visitors1135
Current visitors1
3914Active signals
Attack Mix
Active detections grouped by public-safe category.
This mix helps separate SSH attacks, mail authentication abuse, leak trap hits, and other abuse patterns before reviewing individual IP records.
SSH attacks421
Mail brute/auth261
Leak trap3232
Other0
Country Signal Map
Approximate country placement from IP geolocation. Point size follows detection volume.
The map is a quick geographic view of current threat feed activity and should be treated as operational context, not attribution.
Live Threat Flow
Collector Health
- Mail Sensor 012026-08-10 20:05 GMT+8Live
- Mail Sensor 022026-08-10 19:55 GMT+8Live
- Leak Trap Sensor 012026-08-10 18:50 GMT+8Live
- SSH Sensor 012026-08-10 13:14 GMT+8Warm
- SSH Sensor 022026-08-06 17:46 GMT+8Quiet
- SSH Sensor 032026-08-06 14:44 GMT+8Quiet
- SSH Sensor 042026-08-04 15:44 GMT+8Quiet
Latest Geo Signals
213.176.26.95Netherlands NLSuspicious mail authentication attempts · 2026-08-10 20:05 GMT+8213.176.26.87Netherlands NLSuspicious mail authentication attempts · 2026-08-10 19:55 GMT+8213.176.26.19Netherlands NLSuspicious mail authentication attempts · 2026-08-10 19:50 GMT+887.225.108.138Russian Federation RULeak trap address contacted · 2026-08-10 18:50 GMT+8180.94.75.122Afghanistan AFLeak trap address contacted · 2026-08-10 18:45 GMT+882.148.120.22Qatar QALeak trap address contacted · 2026-08-10 18:45 GMT+8
- ChinaCN801
- South KoreaKR439
- IndiaIN410
- United StatesUS297
- Russian FederationRU292
- BrazilBR222
- NetherlandsNL145
- TaiwanTW143
- IranIR109
- SwedenSE101
Plain IP Blocklists
One IP per line, no reason, source, username, or raw log details.
Choose shorter windows for aggressive blocking or longer windows when you want broader coverage from the active Abuse Radar feed.
Signal Ledger
The signal ledger lists the latest active and archived records with reason, country context, first seen time, last seen time, and blocklist eligibility.
| IP | Reason | Severity | IP Detail | Last Seen | Detections | Feed |
|---|---|---|---|---|---|---|
| Leak trap address contacted | Medium | Israel (IL)Partner Communications Ltd. | 2026-08-06 23:45 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Philippines (PH)Woofy Incorporated | 2026-08-06 23:35 GMT+83 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Germany (DE)Vodafone GmbH | 2026-08-06 23:30 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | High | India (IN)Softcrop It | 2026-08-06 23:10 GMT+83 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Hong Kong (HK)Hong Kong Broadband Network Ltd. | 2026-08-06 23:10 GMT+83 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)PJSC MegaFon | 2026-08-06 23:05 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Taiwan (TW)Data Communication Business Group | 2026-08-06 23:05 GMT+83 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 23:05 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)LG DACOM Corporation | 2026-08-06 23:05 GMT+83 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | Brazil (BR)V tal | 2026-08-06 22:10 GMT+83 days ago | 5 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)IBM Cloud | 2026-08-06 22:10 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Ltd., Telemedia Services | 2026-08-06 22:10 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Australia (AU)Telstra Limited | 2026-08-06 22:10 GMT+83 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 21:50 GMT+83 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-06 21:25 GMT+83 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 20:30 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | High | Brazil (BR)V tal | 2026-08-06 20:30 GMT+84 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Charter Communications LLC | 2026-08-06 20:20 GMT+84 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 20:05 GMT+84 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Australia (AU)Telstra Limited | 2026-08-06 20:05 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Portugal (PT)MEO-RESIDENCIAL MEO - SERVICOS DE COMUNICACOES E MULTIMEDIA S.A. | 2026-08-06 19:30 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)Shreenortheast Connect And Services Pvt Ltd | 2026-08-06 18:55 GMT+84 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 18:55 GMT+84 days ago | 2 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | High | Indonesia (ID)Prime Link Communication, PT | 2026-08-06 18:42 GMT+84 days ago | 8 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United States (US)Charter Communications LLC | 2026-08-06 18:40 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)PJSC MegaFon | 2026-08-06 18:10 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-06 18:10 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CMNET-Zhejiang-AP - China Mobile communications corporation | 2026-08-06 18:05 GMT+84 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)MTS PJSC | 2026-08-06 17:50 GMT+84 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)No.31,Jin-rong Street | 2026-08-06 17:50 GMT+84 days ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | China (CN)No.31,Jin-rong Street | 2026-08-06 17:46 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)China Unicom Shenzen network | 2026-08-06 17:15 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)National Internet Backbone | 2026-08-06 17:15 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | United Kingdom (GB)Virgin Media Limited | 2026-08-06 17:05 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Russian Federation (RU)JSC RDE Unico | 2026-08-06 16:55 GMT+84 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Malaysia (MY)DiGi Telecommunications Sdn. Bhd. | 2026-08-06 16:55 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | China (CN)CHINA169-Backbone - CHINA UNICOM China169 Backbone | 2026-08-06 16:35 GMT+84 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Tanzania (TZ)TANZANIA TELECOMMUNICATIONS CO. LTD - TANZANIA TELECOMMUNICATIONS CO. LTD | 2026-08-06 16:30 GMT+84 days ago | 2 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)Bharti Airtel Ltd., Telemedia Services | 2026-08-06 16:25 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 16:20 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Afghanistan (AF)AFGHANTELECOM GOVERNMENT COMMUNICATION NETWORK | 2026-08-06 16:20 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Iraq (IQ)IQ Networks for Data and Internet Services Ltd | 2026-08-06 15:35 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)SK Broadband Co Ltd | 2026-08-06 14:45 GMT+84 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Brazil (BR)Space Exploration Technologies Corporation | 2026-08-06 14:45 GMT+84 days ago | 1 | 10/15/30d lists | |
| Suspicious SSH authentication attempts | Medium | Indonesia (ID)telkomnet-as-ap - PT Telekomunikasi Indonesia | 2026-08-06 14:44 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | High | Russian Federation (RU)PJSC Rostelecom | 2026-08-06 14:35 GMT+84 days ago | 4 | 10/15/30d lists | |
| Leak trap address contacted | Medium | South Korea (KR)Korea Telecom | 2026-08-06 14:35 GMT+84 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | Medium | Pakistan (PK)Ebone Network PVT. Limited | 2026-08-06 14:30 GMT+84 days ago | 1 | 10/15/30d lists | |
| Leak trap address contacted | Medium | India (IN)BHARTI Airtel Ltd. | 2026-08-06 14:30 GMT+84 days ago | 3 | 10/15/30d lists | |
| Leak trap address contacted | High | Kyrgyzstan (KG)CJSC SAIMA TELECOM | 2026-08-06 14:30 GMT+84 days ago | 4 | 10/15/30d lists |
Showing 50 of 1795 matched records. Page 7 of 36.