← Back to feed
Location
🇨🇳 CN / Beijing
ASN
AS38365 · Beijing Baidu Netcom Science and Technology Co., Ltd.
Cloud Provider
—
Total Events
28
Average by volume
Agent Count
1
First / Last Seen
2026-04-02 08:50 — 2026-05-11 05:22
Attack Types
MITRE ATT&CK Techniques
Initial Access
Defense Evasion
Command and Control
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan
SCAN
Active
medium
43 IPs
22612 events
2026-05-08 — ongoing · 43 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
15 IPs
20178 events
2026-05-08 — ongoing · 15 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
20 IPs
22428 events
2026-05-08 — ongoing · 20 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
26 IPs
21209 events
2026-05-05 — ongoing · 26 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
143 IPs
45145 events
2026-05-05 — ongoing · 143 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
319 IPs
177900 events
2026-05-03 — ongoing · 319 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
321 IPs
180310 events
2026-05-03 — ongoing · 321 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
39 IPs
20716 events
2026-05-02 — ongoing · 39 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
327 IPs
183441 events
2026-04-29 — ongoing · 327 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
321 IPs
179482 events
2026-04-11 — ongoing · 321 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
319 IPs
177451 events
2026-04-02 — ongoing · 319 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
191 IPs
54992 events
2026-03-06 — ongoing · 191 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
169 IPs
42159 events
2026-03-05 — ongoing · 169 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
68 IPs
8785 events
2026-02-28 — ongoing · 68 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd.
ASN
Active
medium
🇨🇳 CN
42 IPs
2271 events
ssh:bruteforce
2026-02-18 — ongoing · 42 IPs from the same network (Beijing Baidu Netcom Science and Technology Co., Ltd., AS38365) were active during …
Session Forensics
Sessions
6 (2 with login)
Avg Depth Score
0.38
Commands Executed
4
Files Downloaded
1
Notable Commands
- uname -s -m
- cd ~; chattr -ia .ssh; lockr -ia .ssh
- lockr -ia .ssh
- cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Fingerprints
HASSH
SSH Client
Evidence Timeline
Reconnaissance
3a46f9cf511b
LOGIN
1
1
60%
Loading events...
Scanner
0c33f8941099
15%
Loading events...
Scanner
98c97be8a493
15%
Loading events...
Scanner
9c46d58efc23
15%
Loading events...
Malware Dropper
b6e6f2ca3b8c
LOGIN
3
1
1
100%
Loading events...
HASSH 03a80b21afa8106…
SSH-2.0-libssh_0.11.1
$ cd ~; chattr -ia .ssh; lockr -ia .ssh$ lockr -ia .ssh$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3Nz…