65.20.198.159

Medium 10/15/30d lists

A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Request review Check AbuseIPDB JSON

Risk score47/100

Detection volume+12Sensor corroboration+5Signal class+18Recency+12

Address intelligence

cached

CountryIraqIQ

City / regionAl ‘Amarah, Muḩafazat Maysan, IraqAsia/Baghdad

NetworkEarthlink Telecommunications Equipment Trading & Services DMCCearthlink.iq

ASNAS203214

Reverse DNS—

Detections3total observations

Reporting sensors1distinct collectors

First seen2026-05-26 18:00 GMT+82 months ago

Last seen2026-08-20 22:20 GMT+82 days ago

Blocklist window10/15/30d lists

Reporting sensors

which collectors observed this address

Leak Trap Sensor 023 observation(s) · last 2026-08-20 22:20 GMT+8Leak

Sensor names are anonymised. Collector hostnames and log contents are never published.

Observation history

1 signal record(s)

Leak trap address contactedMediumLeak trap
3 detection(s) from 1 sensor(s) · first seen 2026-05-26 18:00 GMT+8 · last seen 2026-08-20 22:20 GMT+8 (2 days ago) · active
A monitored leak-trap address was contacted. This suggests the sender may be using exposed or scraped address data.

Abuse Radar publishes sanitized indicators only. Severity is a triage hint computed from detection volume, sensor corroboration, signal class and recency — it is not an attribution claim. See methodology.