← Back to feed

106.12.148.154

TAGGED SUSPICIOUS how we decide →

Threat Confidence

56%

Location

🇨🇳 CN

ASN

AS38365 · Beijing Baidu Netcom Science and Technology Co., Ltd.

Cloud Provider

—

Total Events

Average by volume

Agent Count

First / Last Seen

2026-06-01 22:44 — 2026-07-15 07:32

Attack Types

ssh:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595

Initial Access

T1078

Credential Access

T1110 T1110.001

Discovery

T1046

Exfiltration

T1048

External Corroboration

Blocklist.de

Reported 2026-07-17 22:03

blocklist_de:reported

Campaigns

HASSH 98ddc5604ef6… — SSH-2.0-Go (62 IPs, 20 countries) HASSH Active high 🇺🇸 US

62 IPs 3120 events

ssh:bruteforce

2026-03-14 — ongoing · 62 IPs are running an identical SSH client (HASSH fingerprint 98ddc5604ef6…). Top network: DigitalOcean, LLC (AS14061). Geographic and …

AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd. ASN Active medium 🇨🇳 CN

42 IPs 7397 events

ssh:bruteforce

2026-02-18 — ongoing · 42 IPs from the same network (Beijing Baidu Netcom Science and Technology Co., Ltd., AS38365) were active during …

Session Forensics

scanner ×6 data_exfiltrator ×2

Sessions

8 (2 with login)

Avg Depth Score

0.34

Commands Executed

Files Downloaded

Fingerprints

HASSH

98ddc5604ef6a1006a2b49a58759fbe6 98f63c4d9c87edbd97ed4747fa031019

SSH Client

SSH-2.0-Go

Evidence Timeline

Data Exfiltrator 0ad17ed4f585 w4m_singapore_01 · 2026-07-16 22:29

1 90%

Loading events...

Scanner beccd4eb89bc w4m_singapore_01 · 2026-07-16 22:27

15%

Loading events...

Scanner 79cfb92fbdf6 w4m_singapore_01 · 2026-07-16 22:22

15%

Loading events...

Scanner f552a3a08a24 w4m_singapore_01 · 2026-07-15 07:30

15%

Loading events...

Scanner b862e4f58f61 w4m_singapore_01 · 2026-07-15 07:30

15%

Loading events...

Data Exfiltrator d7e3b3b72efe newark_01 · 2026-06-25 21:44

1 90%

Loading events...

Scanner 326b93435b0f newark_01 · 2026-06-01 22:44

15%

Loading events...

Scanner 2eb992143ea4 newark_01 · 2026-06-01 22:44

15%

Loading events...