Latens Threat Intelligence

Real-time attack data collected from a global honeypot network. Free IP blocklists, reputation lookups, and threat analytics for security teams.

IPs Tracked

Threats (24h)

Blocklisted IPs

Countries

Top Attacking Countries

No data available yet

Recent Threats

IP Address	Country	ASN	Attack Type	First Seen	Last Seen	Confidence
No threats recorded yet. Data will appear after the first collection cycle.

US - Ashburn EU - Frankfurt JP - Tokyo TR - Istanbul

API Reference

All public endpoints are rate-limited to 100 requests per IP per day. Responses are JSON unless otherwise noted.

GET /v1/threats/recent

Returns threats observed in the last 24 hours, sorted by last seen.

Public Rate limited Params: hours (1-168), min_nodes (1-4)

GET /v1/threats/ip/:ip

Look up the reputation of any IPv4 or IPv6 address. Returns abuse score, ASN, TTPs, and blocklist status.

Public Rate limited

GET /v1/threats/stats

Aggregate statistics: total IPs, top countries, top ASNs, and attack counts.

Public Rate limited

GET /blocklist.txt

Plain text IP blocklist, one IP per line. Ready for firewall import (iptables, pf, nftables, Mihomo).

Public Rate limited Content-Type: text/plain

PUT /internal/publish/:key

Internal endpoint for the threat-intel-rs service to push updated blocklist data. Requires Bearer token authentication.

Authenticated Header: Authorization: Bearer <token>

        # Example: look up an IP
curl https://threats.latens.net/v1/threats/ip/1.2.3.4

# Example: get recent threats
curl https://threats.latens.net/v1/threats/recent?hours=12

# Example: download blocklist for firewall
curl -o blocklist.txt https://threats.latens.net/blocklist.txt
      