IntrusionLabs IntrusionLabs
← Back to feed

106.12.153.211

Threat Confidence
43%
Location
🇨🇳 CN
ASN
AS38365 · Beijing Baidu Netcom Science and Technology Co., Ltd.
Cloud Provider
—
Total Events
16
Average by volume
Agent Count
2
First / Last Seen
2026-04-05 12:56 — 2026-04-09 07:45
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1046 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
156 IPs 285792 events
2026-04-06 — ongoing · 156 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
188 IPs 290814 events
2026-04-06 — ongoing · 188 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
151 IPs 266201 events
2026-03-08 — ongoing · 151 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
152 IPs 266974 events
2026-03-05 — ongoing · 152 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
149 IPs 265769 events
2026-03-01 — ongoing · 149 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd. ASN Active medium 🇨🇳 CN
44 IPs 1983 events
ssh:bruteforce
2026-02-18 — ongoing · 44 IPs from the same network (Beijing Baidu Netcom Science and Technology Co., Ltd., AS38365) were active during …
Session Forensics
scanner ×1 reconnaissance ×1 opportunistic_bruter ×1
Sessions
3 (2 with login)
Avg Depth Score
0.42
Commands Executed
1
Files Downloaded
0
Notable Commands
  • uname -s -m
Fingerprints
HASSH
98ddc5604ef6a1006a2b49a58759fbe698f63c4d9c87edbd97ed4747fa031019
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance 98fbd69022ab w4m_singapore_01 · 2026-04-09 07:45
1 1 60%
Loading events...
Scanner 8c2bfb88dedd w4m_singapore_01 · 2026-04-09 07:45
15%
Loading events...
Opportunistic Bruter 29cfdf8bc6a6 w4m_seattle_01 · 2026-04-05 12:56
1 50%
Loading events...