120.238.23.168

High 10/15/30d lists

A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Request review Check AbuseIPDB JSON

Risk score61/100

Detection volume+16Sensor corroboration+15Signal class+18Recency+12

Address intelligence

cached

CountryChinaCN

City / regionGuangzhou, Guangdong Sheng, ChinaAsia/Shanghai

NetworkChina Mobile Communications Corporationchinamobile.com

ASNAS9808

Reverse DNS—

Detections4total observations

Reporting sensors3distinct collectors

First seen2026-05-20 13:50 GMT+83 months ago

Last seen2026-08-21 00:40 GMT+81 day ago

Blocklist window10/15/30d lists

Reporting sensors

which collectors observed this address

Leak Trap Sensor 023 observation(s) · last 2026-08-21 00:40 GMT+8Leak
Retired sensor1 observation(s) · last 2026-05-20 13:50 GMT+8Abuse
Retired sensor1 observation(s) · last 2026-05-20 13:50 GMT+8Abuse

Sensor names are anonymised. Collector hostnames and log contents are never published.

Observation history

1 signal record(s)

Leak trap address contactedHighLeak trap
4 detection(s) from 3 sensor(s) · first seen 2026-05-20 13:50 GMT+8 · last seen 2026-08-21 00:40 GMT+8 (1 day ago) · active
A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.