IntrusionLabs IntrusionLabs
← Back to feed

114.66.29.48

TAGGED SUSPICIOUS how we decide →
Threat Confidence
46%
Location
🇨🇳 CN
ASN
AS136188 · NINGBO, ZHEJIANG Province, P.R.China.
Cloud Provider
—
Total Events
131
Above average by volume
Agent Count
2
First / Last Seen
2026-06-13 22:24 — 2026-06-16 06:09
Attack Types
mysql:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
CINS Army
Reported 2026-06-16 07:07
cins:bad_reputation
Campaigns
Multi-Agent Scan SCAN Active medium
8 IPs 7733 events
2026-04-18 — ongoing · 8 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
24 IPs 4505 events
2026-03-20 — ongoing · 24 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
37 IPs 7135 events
2026-03-02 — ongoing · 37 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
66 IPs 107322 events
2026-02-26 — ongoing · 66 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
29 IPs 29171 events
2026-02-26 — ongoing · 29 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
67 IPs 107668 events
2026-02-26 — ongoing · 67 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
38 IPs 62900 events
2026-02-23 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
15 IPs 3968 events
2026-02-22 — ongoing · 15 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
mysql_probe ×70
Sessions
77
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
MySQL Probe 2df243ad349073f5 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe a1b0866fcb1ffa5c w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 94019d93d36a51f4 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe a5af2e33b892413a w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe c0d19b20fc218a71 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe b9d7603ad1f1880c w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe d12a32ff3e744311 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe d8859378d67a1c56 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 2d5f242ee05c0977 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 3a86e3b75426418f w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 61227614bf835caa w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 6debc3e37ead7df1 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe f9c96cfe7e74aa15 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 86ceb307e998d726 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 954c7f93f2c90fff w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 57e5cf29f6424b1a w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe be62e49553acf296 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 90556035195761b5 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 608d1af2643bb9a3 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe d1bcadd211f437df w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe f5acee88516af9c1 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe d28139faa3116e1a w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 94b286375a01ae8c w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe b33ac8fbcd41416d w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe e2fb420023a260fc w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe fa4294e3302cc175 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 7087b48cd4c5ec91 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe ed97837ccce366a0 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe ed1eecef24745161 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe ae7b6e8d0c4728d1 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 46a72d256924e9ba w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 2f57d3336dd7d583 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 182fe45f60759fe6 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 77f730aaa8bb0ad2 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 6886d5fb7dd76031 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe dfdc508fbe9d68f8 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 2dda06dd25c6cf49 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 2af6b6b871cfdd12 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe d8076f2fe6c2f1f2 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe d16cc60737f7c009 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe c73ff9a6d9faca38 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 1e35f9f15ab3c25e w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe a24b5a4dece2b395 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe ece0d67723fc557f w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe 1fb09111d7f796c5 w4m_seattle_01 · 2026-06-16 06:09
1 20%
Loading events...
MySQL Probe fa42fbd61a6d5841 newark_01 · 2026-06-13 22:24
1 20%
Loading events...
MySQL Probe 3d104e9fb6d276d7 newark_01 · 2026-06-13 22:24
1 20%
Loading events...
MySQL Probe 257123b81c790dd9 newark_01 · 2026-06-13 22:24
1 20%
Loading events...
MySQL Probe 2b59c2608359dfd6 newark_01 · 2026-06-13 22:24
1 20%
Loading events...
MySQL Probe 90eb8ebce28cea1e newark_01 · 2026-06-13 22:24
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-06-16 06:09:39 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:38 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:37 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:36 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:35 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:34 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:33 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:32 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:31 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:31 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:31 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:31 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:31 :3306 mysql MySQL connection opencanary sea
2026-06-16 06:09:31 :3306 mysql MySQL connection opencanary sea