IntrusionLabs / threat intelligence

Sign in

← Back to feed

158.140.166.30

Threat Confidence

16%

Location

🇮🇩 ID / Semarang

ASN

AS63859 · PT. Eka Mas Republik

Cloud Provider

—

Total Events

20

Average by volume

Agent Count

1

First / Last Seen

2026-07-07 05:13 — 2026-07-07 05:13

Attack Types

mysql:bruteforce

MITRE ATT&CK Techniques

Reconnaissance

T1595.002

Credential Access

T1110 T1110.001

External Corroboration

Not flagged by any external feeds

Campaigns

Subnet 158.140.166.0/24 SUBNET Ended high 🇮🇩 ID

3 IPs 72 events

mysql:bruteforce

2026-06-30 — 2026-08-13 · 3 IPs from the same /24 subnet (158.140.166.0/24) were observed attacking our sensors within the same time window. …

Session Forensics

mysql_probe ×15

Sessions

15

Avg Depth Score

0.2

Commands Executed

0

Files Downloaded

0

Evidence Timeline

MySQL Probe cba3eb07dfc8c900 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe efe9eca7d690ca53 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe dd28ce4d151231d4 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe bb72b8479d4540bd newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 03bd5327b8348af9 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe f29940c866da3c1a newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe c0ae91a33bf26487 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 5079a04d8544d268 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 3b3a774a0848d73b newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 02099c7f1a3cf412 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 600f442692378aa4 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 1db7ecaf36bd6f50 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe fba4184fb36a48eb newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe e6cf7e8407afc3d9 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

MySQL Probe 75c8e3ba6e4a26b3 newark_01 · 2026-07-07 05:13

1 20%

Loading events...

Non-Session Events

Timestamp	Port	Proto	Event	Source	Location
2026-07-07 05:13:44	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:40	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:40	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:38	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:34	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:33	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:23	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:21	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:20	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:20	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:19	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:18	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:18	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:17	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:14	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:11	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:10	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:06	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:06	:3306	mysql	MySQL connection	opencanary	ewr
2026-07-07 05:13:05	:3306	mysql	MySQL connection	opencanary	ewr

{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}