IOC Radar
IPHighVerifiedSignal 86/100

120.48.32.130

Location
ChinaChina
Beijing, Beijing
ASN
AS38365
Beijing Baidu Netcom Science and Technology Co., Ltd.
First Seen
Jun 19, 2026
Last Seen
Jun 21, 2026
Jun 19
First Seen
4d ago
Jun 21
Last Seen
2d ago
46
Reports
source reports
95%
Confidence
high
Found in 46 reports. Confidence: high. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
95%
Signal Score
86 / 100
IDS Rule
Yes

Network Information

CountryCNChina
RegionBeijing, Beijing
ASNAS38365
OrganizationBeijing Baidu Netcom Science and Technology Co., Ltd.

IP Category

Hosting
Hosting provider

Feed Intelligence Summary

46 reports95% confidence
AT
Abuse.ch ThreatFox
2d ago
2770 IOCs in report
AT
Abuse.ch ThreatFox
2d ago
2770 IOCs in report
AT
Abuse.ch ThreatFox
2d ago
2766 IOCs in report
AT
Abuse.ch ThreatFox
2d ago
2768 IOCs in report
AT
Abuse.ch ThreatFox
2d ago
2768 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
2768 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
2767 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
2626 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
2625 IOCs in report
AT
Abuse.ch ThreatFox
3d ago
2628 IOCs in report

Activity Timeline

46 total obs
Jun 21Jun 19

Threat Activity Heatmap

· Peak: 2026-06-20
Less
More
Mon
Wed
Fri
Jun
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
·
24h
0
Dormant
7d
46
Critical
30d
46
Critical
3mo
46
Critical
Threat ScoreHigh Risk
86
SIGNAL
Signal Score
95%
Confidence
46
Reports
First seenJun 19, 2026
Last seenJun 21, 2026
Verified IOC
GeolocationCN
CountryChina
LocationBeijing, Beijing
ASNAS38365
OrgBeijing Baidu Netcom Science and Technology Co., Ltd.
Coords39.9110, 116.3950
Hosting

VirusTotal

Not checked

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

high
First detected 4 days ago · Last seen 2 days ago
Appeared in 46 threat reports from 10 sources
Associated with: Akira, Kimsuky, LockBit, Play
Used by malware: AsyncRAT, Pegasus, NetWire, SocGholish, Akira, Mozi, XorDDoS, XMRig, Remcos, Nanocore, XWorm, WannaCry, Rhysida, NjRAT, Play, Havoc, Sliver, Metasploit, Stealc, LockBit, Mirai, Vidar