🌐 AS38365 — Baidu - Beijing Baidu Netcom Science and Technology Co., Ltd.

RIR n/a · CN · reputation 18.3 (LOW)

Malicious IPs (local)

0 high-severity

Reputation

18.3

LOW

Malware families

hosted

Countries spanned

geo footprint

Announced prefixes

0 v4 / 0 v6

Abuse contact

—

run resolver

🔄 Pivot:🌐 AS38365 🏢 Baidu 🌎 CN 📁 IP Blocklists

PIVOT🌐 ASN Profile 🔍 Advanced Search 🕵 OSINT Pivot 🔗 Link Analysis 🕑 Timeline 📤 Export STIX/MISP

🏷 Registration & Abuse

ASN	`AS38365`
Holder / Org	Baidu 🏢 Parent-org rollup
RIR	—
Country	CN
Local netblocks	0
Abuse contact	— Resolve contacts
All contacts	—

🔥 Threat severity

High (.5–.75)

Avg threat 0.5 · peak 0.5

🦠 Top malware families hosted

No data.

🏹 Threat actors hosted

No data.

🌎 Geographic spread

🏷 Tags in this ASN

auto-tagged

medium-severity

📁 Categories

IP Blocklists

📅 First-seen timeline

2026-08

🧭 /24 Subnet Concentration (pattern analysis)

No multi-IP subnet clusters.

📊 Data Completeness & Gaps

Geolocation

100%

🔥 Malicious IPs in AS38365 (5 total, 5 shown)

⇩ Export ALL 5 (CSV, all sources)

Every displayed IP carries its sightings, contributing sources, tags and enrichment inline. The CSV export contains the complete set with all fields.

IP	Threat	Sightings	Sources	Family / Actor	Category	Tags	Enrichment	Country	First seen	Last seen
`106.12.181.132`	0.50	13	FireHOL level2, FireHOL: firehol_level4.netset, IPsum Level… (7)	—	IP Blocklists	auto-tagged, ip, medium-severity	ipinfo	CN	2026-08-06 12:35:12	2026-08-06 19:47:04
`106.13.184.117`	0.50	5	FireHOL: firehol_level4.netset, stamparm ipsum (2)	—	IP Blocklists	auto-tagged, ip, medium-severity	ipinfo	CN	2026-08-06 12:35:12	2026-08-06 19:46:59
`106.12.161.149`	0.50	4	FireHOL: firehol_level4.netset (1)	—	IP Blocklists	auto-tagged, ip, medium-severity	ipinfo	CN	2026-08-06 12:35:12	2026-08-06 13:18:29
`106.13.121.200`	0.50	4	FireHOL: firehol_level4.netset (1)	—	IP Blocklists	auto-tagged, ip, medium-severity	ipinfo	CN	2026-08-06 12:35:12	2026-08-06 13:18:29
`106.13.183.26`	0.50	4	FireHOL: firehol_level4.netset (1)	—	IP Blocklists	auto-tagged, ip, medium-severity	ipinfo	CN	2026-08-06 12:35:12	2026-08-06 13:18:29

🔍 OSINT pivots — external lookups

bgp.he.net →bgp.tools →RIPEstat →BGPView →PeeringDB →CAIDA ASRank →Spamhaus ASN-DROP →Shodan →Censys →GreyNoise →AbuseIPDB →Hurricane whois →robtex →

🔗 Internal pivots & analysis

ASN Analysis →Correlation graph →Infra lookup →Link analysis →Passive DNS →Worst Offenders →Search this ASN →

⚡ Response & automation

☠ Bulk takedown →Takedown ops →Playbooks →Playbook library →AI skills →Run fusion →Mission command →Add to case →Watch this ASN →Create alert rule →

📤 Share & export

CSV (all IPs + sources) →STIX 2.1 →MISP →Palo Alto EDL →Snort/Suricata →Detection rules →

Identity resolves local-first (asn_contacts + ip_ranges + indicators) so the dossier is complete even offline; registration / prefixes / peers augment live via RIPEstat & BGPView (cached). Reputation blends malicious-IP volume, average & peak threat, distinct malware families, geographic spread and sanctioned presence.

Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports

🤖 AI Copilot

Cron: 0 * * * * php /home/zaptf0zdggll/public_html/threats/cron.php

📜 Playbook

Open Response Playbook

ASN Profile