120.79.96.4

120.79.96.4 is a threat-intelligence indicator (IPv4 address) classified as Malicious, corroborated across 5 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

120.79.96.4

Classification

Malicious

Confidence

90 / 100

Corroboration

5 independent sources

First seen

2026-06-19

Last seen

2026-07-05

Network (ASN)

AS37963 — ALIBABA-CN-NET Hangzhou Alibaba Advertising Co.,Ltd.

Country

CN

Tags

• ssh
• brute-force
• attacker
• sshpwauth
• honeypot
• scanner
• malicious

Related CVEs (3)

• CVE-2010-3972
• CVE-2010-2730
• CVE-2010-1899

← Threat intelligence command center · Explore the indicator corpus