IntrusionLabs IntrusionLabs
← Back to feed

120.48.125.245

TAGGED MALICIOUS how we decide →
Threat Confidence
45%
Location
🇨🇳 CN / Beijing
ASN
AS38365 · Beijing Baidu Netcom Science and Technology Co., Ltd.
Cloud Provider
—
Total Events
12
Average by volume
Agent Count
1
First / Last Seen
2026-09-05 17:34 — 2026-09-15 06:45
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
T1078
Credential Access
T1110 T1110.001
Exfiltration
T1048
External Corroboration
Not flagged by any external feeds
Campaigns
AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd. ASN Active medium 🇨🇳 CN
14 IPs 1096 events
ssh:bruteforce
2026-02-18 — ongoing · 14 IPs from the same network (Beijing Baidu Netcom Science and Technology Co., Ltd., AS38365) were active during …
Session Forensics
data_exfiltrator ×2
Sessions
2 (2 with login)
Avg Depth Score
0.9
Commands Executed
0
Files Downloaded
0
Fingerprints
HASSH
98ddc5604ef6a1006a2b49a58759fbe6
SSH Client
SSH-2.0-Go
Evidence Timeline
Data Exfiltrator 8f3b113706da newark_01 · 2026-09-15 06:41
1 90%
Loading events...
Data Exfiltrator 8e2ad94a2121 newark_01 · 2026-09-05 17:34
1 90%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}