IntrusionLabs IntrusionLabs
← Back to feed

34.79.93.108

TAGGED SUSPICIOUS how we decide →
Threat Confidence
39%
Location
🇧🇪 BE / Brussels
ASN
AS396982 · Google LLC
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
2
First / Last Seen
2026-05-17 04:10 — 2026-07-15 05:57
Attack Types
ftp:bruteforce mysql:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
Not flagged by any external feeds
Campaigns
AS396982 Google LLC ASN Active medium 🇧🇪 BE
103 IPs 11036 events
ftp:bruteforcehttp:scanmysql:bruteforcessh:bruteforce
2026-02-18 — ongoing · 103 IPs from the same network (Google LLC, AS396982) were active during overlapping time periods. Temporal correlation across …
Session Forensics
ftp_probe ×5 mysql_probe ×1
Sessions
6
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
FTP Probe c5f374a2e765a513 newark_01 · 2026-07-15 05:57
1 20%
Loading events...
FTP Probe 31f3ed2a660e92fb newark_01 · 2026-06-22 15:28
1 20%
Loading events...
FTP Probe 4609734a43e4e84a newark_01 · 2026-06-10 18:08
1 20%
Loading events...
FTP Probe 744ac6e8ab6b8aad newark_01 · 2026-06-10 08:30
1 20%
Loading events...
MySQL Probe 5ebe3dab03d8e754 w4m_seattle_01 · 2026-05-26 08:41
1 20%
Loading events...
FTP Probe 845650749b4bb8d5 w4m_seattle_01 · 2026-05-17 04:10
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-07-15 05:57:43 :21 ftp FTP connection opencanary ewr
2026-06-22 15:28:27 :21 ftp FTP connection opencanary ewr
2026-06-10 18:08:31 :21 ftp FTP connection opencanary ewr
2026-06-10 08:30:57 :21 ftp FTP connection opencanary ewr
2026-05-26 08:41:49 :3306 mysql MySQL connection opencanary sea
2026-05-17 04:10:42 :21 ftp FTP connection opencanary sea