Connecting

Address

189.114.136.231

Medium 30d list only

A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Triage

Risk score

how this score is made up
Risk score49/100
Detection volume+16Sensor corroboration+15Signal class+18Recency+0
Enrichment

Address intelligence

cached
CountryBrazilBR
City / regionSao Paulo, Sao Paulo, BrazilAmerica/Sao_Paulo
NetworkTELEFÔNICA BRASIL S.Atelefonica.com.br
ASNAS18881
Reverse DNScorporativo.static.gvt.net.br
Detections4total observations
Reporting sensors3distinct collectors
First seen2026-05-18 20:50 GMT+84 months ago
Last seen2026-09-22 16:40 GMT+817 days ago
Blocklist window30d list only
Attribution

Reporting sensors

which collectors observed this address
  • Leak Trap Sensor 023 observations · last 2026-09-22 16:40 GMT+8Leak
  • Retired sensor1 observation · last 2026-05-18 20:50 GMT+8Abuse
  • Retired sensor1 observation · last 2026-05-18 20:50 GMT+8Abuse
Sensor names are anonymised. Collector hostnames and log contents are never published.
Signals

Observation history

1 signal record
  • Leak trap address contactedMediumLeak trap
    4 detections from 3 sensors · first seen 2026-05-18 20:50 GMT+8 · last seen 2026-09-22 16:40 GMT+8 (17 days ago) · active

    A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.