IntrusionLabs IntrusionLabs
← Back to feed

49.81.67.130

TAGGED SUSPICIOUS how we decide →
Why: Our sensors observed mysql bruter sessions · certainty: inferred
Threat Confidence
26%
Assessment
MySQL password brute-forcer
  • Part of a 107-IP campaign from the same network, active in the same window.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇳 CN
ASN
AS4134 · Chinanet
Cloud Provider
—
Total Events
112
Above average by volume
Agent Count
1
First / Last Seen
2026-10-13 07:33 — 2026-10-13 07:36
Attack Types
mysql:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
CINS Army
Reported 2026-10-19 05:01
cins:bad_reputation
Campaigns
AS4134 Chinanet ASN Active medium 🇨🇳 CN
107 IPs 12263 events
ftp:bruteforcemysql:bruteforcessh:bruteforcessh:connectionssh:intrusionssh:malwaretelnet:connection
2026-02-18 — ongoing · 107 IPs from the same network (Chinanet, AS4134) were active during overlapping time periods. Temporal correlation across a …
Session Forensics
mysql_probe ×112
Sessions
112
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
MySQL Probe ef1f44fb44636c9c newark_01 · 2026-10-13 07:36
1 20%
Loading events...
MySQL Probe 1073da91e26ba6a6 newark_01 · 2026-10-13 07:36
1 20%
Loading events...
MySQL Probe c5d4066dcede2cf9 newark_01 · 2026-10-13 07:36
1 20%
Loading events...
MySQL Probe 4a503062880075a8 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe ad60b4e4a9ba042d newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 3815b3c3747efee1 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe e3781285b1d8b1bd newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 41e6ca1f128ec37e newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 5e476cea58d24bf6 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 6094decaa9383b97 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe e141a70fb8488f92 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 71b14bcd9f1c5851 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe f8e707fbc81b3de6 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 09d35ab5f1c1f557 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe b34b4d4127afb86c newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe cc60cd7c29b81191 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe d8e273a47c100318 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe fe8c440e2309e12a newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 3ca03c875d226c6a newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 740e713348e6b715 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 3331db9336ae2144 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe acf1293017c3d19a newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 4b209b224504747f newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 358b927af1f7c22f newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 077bfd9eca3d14a8 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe e2d43bd8570c2ea0 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 3c8aca0470131873 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe ecac634261d66804 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 685719cf6e3ff7c4 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 0bc14d96f794d629 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe bacec9c289d58907 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 19fad8409bf06933 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 30fe49b1c4c09ddd newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 7ab72acffe4ca7b3 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe d21ccbe8981bb304 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe e8a32fe09932da27 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe f9b49ccaee3af300 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 8002c70a8677534e newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe f66829ac598ea460 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe d4cad94040c430ec newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 8501480f6c34cdd8 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 1e6cc335a013d2f9 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe b6baa5f1ede2e2a0 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 215e573941092b4f newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 9614eaacce588f42 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 8e7a531f22f34fe3 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe c63584a0085fe680 newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe 0f2b8472fa8cd77e newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe b698fa651315511e newark_01 · 2026-10-13 07:35
1 20%
Loading events...
MySQL Probe eb1014609ffbb57b newark_01 · 2026-10-13 07:35
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-10-13 07:36:02 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:36:02 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:36:00 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:59 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:57 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:56 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:55 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:53 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:51 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:51 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:50 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:49 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:49 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:48 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:47 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:46 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:44 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:44 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:43 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:42 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:41 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:40 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:39 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:38 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:38 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:37 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:35 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:35 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:34 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:33 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:33 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:31 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:30 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:28 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:27 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:27 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:25 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:24 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:23 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:21 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:19 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:19 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:18 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:16 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:15 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:15 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:14 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:12 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:12 :3306 mysql MySQL connection opencanary ewr
2026-10-13 07:35:09 :3306 mysql MySQL connection opencanary ewr