Question 1

What is Threat.live?

Accepted Answer

Threat.live is a real-time threat intelligence platform that detects and blocks DDoS attacks, brute force attempts, and cyber threats using BGP blackhole routing and community-driven threat feeds.

Question 2

How does the abuse IP blacklist work?

Accepted Answer

Threat.live maintains a continuously updated database of malicious IP addresses detected across its global sensor network. These IPs are categorized by threat type (DDoS, Brute Force, Web Scan, Network Scan) and can be integrated into your network via BGP, MikroTik RSC files, or API.

Question 3

What devices are supported for integration?

Accepted Answer

Threat.live supports FortiGate, MikroTik, Juniper, Cisco routers via BGP peering, as well as Linux and Windows servers through automated install scripts.

Question 4

Is Threat.live free to use?

Accepted Answer

Yes, Threat.live offers free access to its threat IP list, CVE/KEV database, live threat map, and network diagnostic tools. BGP peering and advanced features are available through the client portal.