IntrusionLabs IntrusionLabs
← Back to feed

158.140.166.33

Threat Confidence
17%
Location
🇮🇩 ID / Semarang
ASN
AS63859 · PT. Eka Mas Republik
Cloud Provider
—
Total Events
23
Average by volume
Agent Count
1
First / Last Seen
2026-06-30 07:57 — 2026-06-30 07:57
Attack Types
mysql:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
Subnet 158.140.166.0/24 SUBNET Ended high 🇮🇩 ID
3 IPs 72 events
mysql:bruteforce
2026-06-30 — 2026-08-13 · 3 IPs from the same /24 subnet (158.140.166.0/24) were observed attacking our sensors within the same time window. …
Session Forensics
mysql_probe ×14
Sessions
14
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
MySQL Probe aab073d082e1fdd4 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 6e26b70e7ce59935 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 31a7efd930b908c2 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe e82d782a4db2e959 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 69de0692478bb672 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 9b28bcac0d8853a8 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 26edbbefaa3ebdca newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe c677b7ba8385d0f6 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 36019e6a089d26a5 newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe d7c1a8b253a90c9e newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 2dd8a9733270d53a newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 4184c36c8386c52a newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe af4ed93c92a77b3d newark_01 · 2026-06-30 07:57
1 20%
Loading events...
MySQL Probe 8a1d31449d59738d newark_01 · 2026-06-30 07:57
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-06-30 07:57:39 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:37 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:37 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:35 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:34 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:31 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:30 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:28 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:27 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:26 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:25 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:19 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:17 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:14 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:13 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:09 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:08 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:08 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:06 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:05 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:05 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:03 :3306 mysql MySQL connection opencanary ewr
2026-06-30 07:57:00 :3306 mysql MySQL connection opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}