Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
120.48.165.189 has a threat confidence score of 78%. This IP address from China (AS38365, Beijing Baidu Netcom Science and Technology Co., Ltd.) has been observed in 79 honeypot sessions targeting SSH protocols. First observed on January 25, 2026, most recently active April 6, 2026.
Identifies SSH session activity where the attacker executes uname -s -m to retrieve the operating system name and machine architecture for host fingerprinting and payload targeting.