← Back to feed

120.48.84.2

TAGGED MALICIOUS how we decide →
Threat Confidence
37%
Location
🇨🇳 CN / Beijing
ASN
AS38365 · Beijing Baidu Netcom Science and Technology Co., Ltd.
Cloud Provider
Total Events
6
Below average by volume
Agent Count
1
First / Last Seen
2026-07-18 00:19 — 2026-07-18 00:24
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Initial Access
Credential Access
Exfiltration
External Corroboration
Blocklist.de
Reported 2026-07-24 18:03
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
98 IPs 289648 events
2026-06-25 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 218604 events
2026-05-18 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
17 IPs 15209 events
2026-05-18 — ongoing · 17 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 203236 events
2026-05-18 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
48 IPs 113893 events
2026-05-18 — ongoing · 48 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
134 IPs 412205 events
2026-05-18 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
82 IPs 219242 events
2026-05-18 — ongoing · 82 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
HASSH 98ddc5604ef6… — SSH-2.0-Go (50 IPs, 17 countries) HASSH Active high 🇨🇳 CN
50 IPs 2403 events
ssh:bruteforce
2026-03-14 — ongoing · 50 IPs are running an identical SSH client (HASSH fingerprint 98ddc5604ef6…). Top network: Beijing Baidu Netcom Science and …
Multi-Agent Scan SCAN Active medium
14 IPs 8192 events
2026-03-06 — ongoing · 14 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
120 IPs 313766 events
2026-03-06 — ongoing · 120 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on DO. Scanning the same …
Multi-Agent Scan SCAN Active medium
104 IPs 254620 events
2026-03-06 — ongoing · 104 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 192299 events
2026-03-02 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
7 IPs 4490 events
2026-03-02 — ongoing · 7 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
54 IPs 149504 events
2026-03-02 — ongoing · 54 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
71 IPs 148374 events
2026-03-02 — ongoing · 71 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
134 IPs 419831 events
2026-02-22 — ongoing · 134 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS38365 Beijing Baidu Netcom Science and Technology Co., Ltd. ASN Active medium 🇨🇳 CN
37 IPs 2864 events
ssh:bruteforce
2026-02-18 — ongoing · 37 IPs from the same network (Beijing Baidu Netcom Science and Technology Co., Ltd., AS38365) were active during …
Session Forensics
data_exfiltrator ×2
Sessions
2 (2 with login)
Avg Depth Score
0.9
Commands Executed
0
Files Downloaded
0
Fingerprints
SSH-2.0-Go
Evidence Timeline
Data Exfiltrator ac64a1277ddc w4m_seattle_01 · 2026-07-23 20:23
1 90%
Loading events...
Data Exfiltrator 8de3874bde20 w4m_singapore_01 · 2026-07-18 00:19
1 90%
Loading events...
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}