1.30.20.98 has a moderate threat confidence level of 52%, originating from China, on the CHINA UNICOM China169 Backbone network (4837). It has been observed across 199 sessions targeting SSH, First observed on January 22, 2026, most recently active March 5, 2026.