Connecting

Address

111.26.106.119

High 10/15/30d lists

A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Triage

Risk score

how this score is made up
Risk score73/100
Detection volume+28Sensor corroboration+15Signal class+18Recency+12
Enrichment

Address intelligence

cached
CountryChinaCN
City / regionChangchun, Jilin Sheng, ChinaAsia/Shanghai
NetworkChina Mobile Communications Corporationchinamobile.com
ASNAS134810
Reverse DNS—
Detections7total observations
Reporting sensors3distinct collectors
First seen2026-05-16 23:15 GMT+84 months ago
Last seen2026-10-06 22:35 GMT+82 days ago
Blocklist window10/15/30d lists
Attribution

Reporting sensors

which collectors observed this address
  • Leak Trap Sensor 026 observations · last 2026-10-06 22:35 GMT+8Leak
  • Retired sensor1 observation · last 2026-05-16 23:15 GMT+8Abuse
  • Retired sensor1 observation · last 2026-05-16 23:15 GMT+8Abuse
Sensor names are anonymised. Collector hostnames and log contents are never published.
Signals

Observation history

1 signal record
  • Leak trap address contactedHighLeak trap
    7 detections from 3 sensors · first seen 2026-05-16 23:15 GMT+8 · last seen 2026-10-06 22:35 GMT+8 (2 days ago) · active

    A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.