IntrusionLabs IntrusionLabs
← Back to feed

64.89.163.145

TAGGED SUSPICIOUS how we decide →
Threat Confidence
41%
Location
🇬🇧 GB
ASN
AS401626 · Netiface America, Inc.
Cloud Provider
—
Total Events
6
Below average by volume
Agent Count
2
First / Last Seen
2026-04-09 01:30 — 2026-05-04 07:24
Attack Types
mysql:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
T1595.002
Credential Access
T1110 T1110.001
External Corroboration
DShield Top Attackers
Reported 2026-05-04 11:01
dshield:top_attacker
Campaigns
Subnet 64.89.163.0/24 SUBNET Active high 🇬🇧 GB
26 IPs 424 events
mysql:bruteforce
2026-03-30 — ongoing · 26 IPs from the same /24 subnet (64.89.163.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan SCAN Active medium
70 IPs 113546 events
2026-03-05 — ongoing · 70 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
38 IPs 2770 events
2026-03-02 — ongoing · 38 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
74 IPs 18516 events
2026-03-01 — ongoing · 74 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
93 IPs 119397 events
2026-02-27 — ongoing · 93 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
mysql_probe ×6
Sessions
6
Avg Depth Score
0.2
Commands Executed
0
Files Downloaded
0
Evidence Timeline
MySQL Probe 8c4cacaad775a260 newark_01 · 2026-05-04 07:24
1 20%
Loading events...
MySQL Probe 43371fcdef871df5 w4m_singapore_01 · 2026-04-28 19:59
1 20%
Loading events...
MySQL Probe 1d88cd0edefbea1c w4m_singapore_01 · 2026-04-19 10:33
1 20%
Loading events...
MySQL Probe 398ef93cf0bea25f w4m_singapore_01 · 2026-04-10 16:53
1 20%
Loading events...
MySQL Probe 775b5db84f0f660d w4m_singapore_01 · 2026-04-09 18:07
1 20%
Loading events...
MySQL Probe d16896f8660b81c1 w4m_singapore_01 · 2026-04-09 01:30
1 20%
Loading events...
Non-Session Events
Timestamp Port Proto Event Source Location
2026-05-04 07:24:39 :3306 mysql MySQL connection opencanary ewr
2026-04-28 19:59:58 :3306 mysql MySQL connection opencanary sin
2026-04-19 10:33:00 :3306 mysql MySQL connection opencanary sin
2026-04-10 16:53:41 :3306 mysql MySQL connection opencanary sin
2026-04-09 18:07:55 :3306 mysql MySQL connection opencanary sin
2026-04-09 01:30:04 :3306 mysql MySQL connection opencanary sin