1.212.225.99

High 10/15/30d lists

A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Request review Check AbuseIPDB JSON

Risk score51/100

Detection volume+16Sensor corroboration+5Signal class+18Recency+12

Address intelligence

cached

CountrySouth KoreaKR

City / regionSeoul, Seoul, South KoreaAsia/Seoul

NetworkLG DACOM Corporationdacom.co.kr

ASNAS3786

Reverse DNS—

Detections7total observations

Reporting sensors2distinct collectors

First seen2026-05-26 04:05 GMT+82 months ago

Last seen2026-08-20 23:05 GMT+81 day ago

Blocklist window10/15/30d lists

Reporting sensors

which collectors observed this address

Leak Trap Sensor 024 observation(s) · last 2026-08-20 23:05 GMT+8Leak
Mail Sensor 023 observation(s) · last 2026-08-19 03:35 GMT+8Mail

Sensor names are anonymised. Collector hostnames and log contents are never published.

Observation history

2 signal record(s)

Leak trap address contactedHighLeak trap
4 detection(s) from 1 sensor(s) · first seen 2026-05-26 04:05 GMT+8 · last seen 2026-08-20 23:05 GMT+8 (1 day ago) · active
A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.
Suspicious mail authentication attemptsMediumMail / credential abuse
3 detection(s) from 1 sensor(s) · first seen 2026-08-19 03:35 GMT+8 · last seen 2026-08-19 03:35 GMT+8 (3 days ago) · active
Suspicious mail authentication attempts against monitored mail infrastructure.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.