IPHighVerifiedSignal 86/100
120.48.168.57
Location
ChinaBeijing, Beijing
ASN
AS38365
Beijing Baidu Netcom Science and Technology Co., Ltd.
First Seen
Jun 2, 2026
Last Seen
Jun 12, 2026
Found in 206 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes
Threat Context
Network Information
CountryChina
ChinaRegionBeijing, Beijing
ASNAS38365
OrganizationBeijing Baidu Netcom Science and Technology Co., Ltd.
IP Category
⬢
Hosting
Hosting provider
Feed Intelligence Summary
206 reports95% confidence
Activity Timeline
Jun 12Jun 2
Threat Activity Heatmap
· Peak: 2026-06-04LessMore
Mon
Wed
Fri
24h
21
Critical
7d
143
Critical
30d
206
Critical
3mo
206
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
206
Reports
First seenJun 2, 2026
Last seenJun 12, 2026
Verified IOC
GeolocationCN
CountryChina
LocationBeijing, Beijing
ASNAS38365
OrgBeijing Baidu Netcom Science and Technology Co., Ltd.
Coords39.9110, 116.3950
Hosting
VirusTotal
Not checked
Export & API
STIX 2.1 Bundle
CSV Export
Permalink
IOC Journey
highFirst detected 9 days ago · Last seen today
Appeared in 206 threat reports from 10 sources
Associated with: Kimsuky, Hive, Play, Sandworm, Turla
Used by malware: Mirai, Vidar, Dridex, NjRAT, NetWire, XMRig, Pegasus, Lumma, SocGholish, Remcos, Rhysida, Rhadamanthys, Nanocore, Stealc, META Stealer, Hive, Play, PowerShell Empire, Bumblebee, RedLine, Havoc, Sliver, Cobalt Strike, Metasploit, XWorm, AsyncRAT