Critical Alert
Security alert: 120.48.106.235 rated 10/10 based on 14 verified incidents.
Threat profile indicates sustained malicious activity with 92% confidence rating.
More threatening than 100% of monitored IPs
IP Address
120.48.106.235
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
China
Location
Beijing Baidu Netcom Scie...
ASN 38365
14
Reports
Honeypot
Data Source
Threat Categories
Hacking
10
SSH
5
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
7. September 2026
Last Activity
24. September 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 38365) with generally good reputation. The ISP Beijing Baidu Netcom Science and Technology Co., Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
91%
Verified
Confidence History
25. Apr 2026 - 24. Sep 2026
92%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 120.48.106.235
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS38365
- ISP
- Beijing Baidu Netcom Science and Technology Co., Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 27 Apr 2026
- Last Reported
- 24 Sep 2026, 18:31
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS38365
Beijing Baidu Netcom Science and Technology Co., Ltd.
CN
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
309
Total IPs Monitored
5,988
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to Beijing Baidu Netcom Science and Technology Co., Ltd. (AS38365), which manages 309 IP addresses in our monitoring system. Out of these, 5,988 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 804,816 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
14
avg: 9
++
Network Comparison
Compared against 589 IPs in ASN 38365
Threat Level
10/10
network avg: 8.6
+
Total Reports
14
network avg: 14
=
Network Beijing Baidu Netcom Science and Technology Co., Ltd. has overall threat level 1/10
Geographic Comparison
Compared against 44,673 IPs in CN
Threat Level
10/10
country avg: 7.4
+
Total Reports
14
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 Sep 2026
5 reports
Daily Average
0.3
reports/day
Most Active
Saturday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
10
SSH
5
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
731,923 threat incidents tracked globally • Last 24h: 28,958 Logs
FEED
Top Threat Sources
-
01
United States142,988 19.5% -
02
Brazil110,647 15.1%
-
03
India81,878 11.2%
-
04
China44,666 6.1%
-
05
SC29,232 4%
-
06
Netherlands17,432 2.4%
-
07
Germany17,377 2.4%
-
08
Pakistan16,540 2.3%
-
09
Argentina16,180 2.2%
-
10
Colombia15,128 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9/10
Avg Threat
86%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
180.76.185.216
10/10
Confidence
98%
Reports
11
Location
CN
CN
120.48.33.69
10/10
Confidence
95%
Reports
11
Location
CN
CN
120.48.14.72
10/10
Confidence
94%
Reports
19
Location
CN
CN
180.76.236.71
10/10
Confidence
91%
Reports
15
Location
CN
CN
106.12.128.184
10/10
Confidence
90%
Reports
16
Location
CN
CN
180.76.105.165
8/10
Confidence
88%
Reports
36
Location
CN
CN
120.48.6.172
10/10
Confidence
88%
Reports
9
Location
CN
CN
180.76.243.197
10/10
Confidence
87%
Reports
41
Location
CN
CN
180.76.232.26
10/10
Confidence
87%
Reports
8
Location
CN
CN
106.12.181.132
8/10
Confidence
87%
Reports
8
Location
CN
CN
180.76.146.235
8/10
Confidence
86%
Reports
45
Location
CN
CN
120.48.170.74
10/10
Confidence
85%
Reports
7
Location
CN
CN
180.76.103.111
8/10
Confidence
84%
Reports
13
Location
CN
CN
106.13.107.35
8/10
Confidence
83%
Reports
8
Location
CN
CN
120.48.124.81
8/10
Confidence
83%
Reports
6
Location
CN
CN
180.76.240.16
8/10
Confidence
82%
Reports
8
Location
CN
CN
120.48.52.177
8/10
Confidence
80%
Reports
11
Location
CN
CN
120.48.60.44
8/10
Confidence
79%
Reports
18
Location
CN
CN
180.76.202.69
8/10
Confidence
78%
Reports
25
Location
CN
CN
106.13.38.13
10/10
Confidence
78%
Reports
10
Location
CN
CN
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
66%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
222.220.102.32
10/10
Confidence
100%
Reports
12
ISP
Chinanet
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
112.123.228.180
10/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
101.96.214.98
10/10
Confidence
98%
Reports
14
ISP
Beijing Volcano...
118.196.119.108
8/10
Confidence
98%
Reports
12
ISP
China Telecom (...
180.76.185.216
10/10
Confidence
98%
Reports
11
ISP
Beijing Baidu N...
111.186.59.252
10/10
Confidence
97%
Reports
42
ISP
China Education...
103.203.59.16
7/10
Confidence
96%
Reports
14
ISP
Beijing Tiantex...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
107.172.158.148
10/10
Confidence
92%
Reports
1,568
Location
US
US
181.214.48.144
10/10
Confidence
92%
Reports
1,433
Location
BR
BR
103.134.70.35
10/10
Confidence
92%
Reports
1,287
Location
BD
BD
89.248.172.14
10/10
Confidence
92%
Reports
225
Location
NL
NL
37.187.197.110
8/10
Confidence
92%
Reports
220
Location
FR
FR
91.196.152.50
8/10
Confidence
92%
Reports
180
Location
FR
FR
91.196.152.154
10/10
Confidence
92%
Reports
167
Location
FR
FR
91.196.152.62
10/10
Confidence
92%
Reports
162
Location
FR
FR
91.196.152.84
10/10
Confidence
92%
Reports
161
Location
FR
FR
162.217.103.70
8/10
Confidence
92%
Reports
160
Location
US
US
45.138.16.138
8/10
Confidence
92%
Reports
155
Location
PL
PL
91.196.152.164
10/10
Confidence
92%
Reports
152
Location
FR
FR
91.196.152.77
10/10
Confidence
92%
Reports
146
Location
FR
FR
91.196.152.225
10/10
Confidence
92%
Reports
140
Location
FR
FR
91.196.152.224
8/10
Confidence
92%
Reports
135
Location
FR
FR