IntrusionLabs IntrusionLabs
← Back to feed

103.27.109.179

Threat Confidence
10%
Location
🇭🇰 HK
ASN
AS132883 · TOPWAY GLOBAL LIMITED
Cloud Provider
—
Total Events
1
Below average by volume
Agent Count
1
First / Last Seen
2026-04-24 22:27 — 2026-04-24 22:27
Attack Types
mysql:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
Multi-Agent Scan SCAN Active medium
301 IPs 279853 events
2026-05-03 — ongoing · 301 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 235096 events
2026-05-03 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
41 IPs 57764 events
2026-05-03 — ongoing · 41 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
79 IPs 242884 events
2026-04-24 — ongoing · 79 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
18 IPs 1938 events
2026-03-26 — ongoing · 18 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
29 IPs 15791 events
2026-02-24 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
mysql_probe ×3
Sessions
3
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
MySQL Probe 7dcc2a82f71d309e w4m_seattle_01 · 2026-05-17 21:07
1 20%
Loading events...
MySQL Probe ff28b334d36c2c4a newark_01 · 2026-05-17 01:41
1 20%
Loading events...
MySQL Probe c70e0f577f097d85 w4m_seattle_01 · 2026-04-24 22:27
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-05-17 21:07:20 :3306 mysql MySQL connection opencanary sea
2026-05-17 01:41:21 :3306 mysql MySQL connection opencanary ewr
2026-04-24 22:27:08 :3306 mysql MySQL connection opencanary sea