IntrusionLabs IntrusionLabs
← Back to feed

61.7.209.104

Threat Confidence
22%
Location
🇹🇭 TH
ASN
AS9931 · National Telecom Public Company Limited
Cloud Provider
—
Total Events
19
Average by volume
Agent Count
1
First / Last Seen
2026-06-26 05:09 — 2026-07-01 03:36
Attack Types
mysql:bruteforce ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Initial Access
T1078
Credential Access
T1110 T1110.001
Discovery
T1016 T1082
External Corroboration
Not flagged by any external feeds
Campaigns
Not associated with any campaigns
Session Forensics
mysql_probe ×1 reconnaissance ×1 credential_probe ×2
Sessions
4 (1 with login)
Avg Depth Score
0.3
Commands Executed
1
Files Downloaded
0
Notable Commands
  • uname -a
Fingerprints
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Evidence Timeline
Reconnaissance 9a7b70cee86f newark_01 · 2026-07-01 03:36
1 1 60%
Loading events...
Credential Probe aabe32898094 newark_01 · 2026-07-01 03:07
1 20%
Loading events...
Credential Probe 813ef4ac5084 newark_01 · 2026-07-01 02:39
1 20%
Loading events...
MySQL Probe fc26808fe3362d2c newark_01 · 2026-06-26 05:09
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-06-26 05:09:40 :3306 mysql MySQL connection opencanary ewr
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}