IntrusionLabs IntrusionLabs
← Back to feed

179.43.133.154

TAGGED MALICIOUS how we decide →
Why: Our sensors observed proxy abuser sessions · certainty: inferred
hostedby.privatelayer.com (privatelayer.com) ✗ FCrDNS
Threat Confidence
66%
Assessment
Proxy checker: validates compromised hosts as traffic relays
  • Logged in with one credential in 1,933 of 1,933 logins: it returns to a host it treats as already compromised rather than guessing passwords.
  • Opened tunnels through the host in 1,922 sessions (1,914 proxy checks, 8 web traffic), requesting google.com to confirm the relay works.
  • Active for 17 days, 2026-10-01 to 2026-10-19.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇭 CH / Rümlang
ASN
AS51852 · Private Layer INC
Cloud Provider
—
Total Events
21527
Top 1% by volume
Agent Count
1
First / Last Seen
2026-10-01 18:58 — 2026-10-19 08:36
Attack Types
ssh:connection ssh:credential-reuse ssh:proxy-abuse
MITRE ATT&CK Techniques
Reconnaissance
T1595 T1595.001
Initial Access
T1078
Discovery
T1046
Command and Control
T1090 T1572
External Corroboration
DShield Top Attackers
Reported 2026-10-19 06:00
dshield:top_attacker
Campaigns
Not associated with any campaigns
Session Forensics
scanner ×24 proxy_abuser ×1922 opportunistic_bruter ×11
Sessions
1957 (1933 with login)
Avg Depth Score
0.84
Commands Executed
0
Files Downloaded
0
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
a7a87fbe86774c2e40cc4a7ea2ab1b3c
SSH Client
SSH-2.0-libssh2_1.8.1
Evidence Timeline
Proxy Abuser 785cf57b06af w4m_singapore_01 · 2026-10-19 08:36
1 85%
Loading events...
Proxy Abuser 7754a17d0696 w4m_singapore_01 · 2026-10-19 08:08
1 85%
Loading events...
Proxy Abuser 78a4e03b3195 w4m_singapore_01 · 2026-10-19 07:35
1 85%
Loading events...
Proxy Abuser 91e9500f1b9c w4m_singapore_01 · 2026-10-19 07:08
1 85%
Loading events...
Proxy Abuser be49282bb039 w4m_singapore_01 · 2026-10-19 06:35
1 85%
Loading events...
Proxy Abuser 7ad3d93223f1 w4m_singapore_01 · 2026-10-19 06:05
1 85%
Loading events...
Proxy Abuser 9c69e81cb2dd w4m_singapore_01 · 2026-10-19 05:37
1 85%
Loading events...
Proxy Abuser ae52021a2858 w4m_singapore_01 · 2026-10-19 05:08
1 85%
Loading events...
Proxy Abuser 89d410038a53 w4m_singapore_01 · 2026-10-19 04:36
1 85%
Loading events...
Proxy Abuser 3e7f5d67af9b w4m_singapore_01 · 2026-10-19 04:04
1 85%
Loading events...
Proxy Abuser 131b04082276 w4m_singapore_01 · 2026-10-19 03:34
1 85%
Loading events...
Proxy Abuser 041f63688d4b w4m_singapore_01 · 2026-10-19 03:10
1 85%
Loading events...
Scanner 0cc71d441ebb w4m_singapore_01 · 2026-10-19 02:37
15%
Loading events...
Proxy Abuser 11f3766c9783 w4m_singapore_01 · 2026-10-19 02:05
1 85%
Loading events...
Proxy Abuser f2899ccb30e8 w4m_singapore_01 · 2026-10-19 01:34
1 85%
Loading events...
Proxy Abuser ee075221dab9 w4m_singapore_01 · 2026-10-19 01:05
1 85%
Loading events...
Proxy Abuser 8e8982f35829 w4m_singapore_01 · 2026-10-19 00:35
1 85%
Loading events...
Proxy Abuser 8dafa527d428 w4m_singapore_01 · 2026-10-19 00:06
1 85%
Loading events...
Proxy Abuser 06d512f630b8 w4m_singapore_01 · 2026-10-18 23:34
1 85%
Loading events...
Proxy Abuser 4dc56b110fc0 w4m_singapore_01 · 2026-10-18 23:04
1 85%
Loading events...
Proxy Abuser fbe3fd43f5ed w4m_singapore_01 · 2026-10-18 22:34
1 85%
Loading events...
Proxy Abuser 6a28456249a8 w4m_singapore_01 · 2026-10-18 22:08
1 85%
Loading events...
Proxy Abuser 16675c1a5463 w4m_singapore_01 · 2026-10-18 21:38
1 85%
Loading events...
Proxy Abuser 3dd193ff079e w4m_singapore_01 · 2026-10-18 21:09
1 85%
Loading events...
Proxy Abuser e9e46b761979 w4m_singapore_01 · 2026-10-18 20:39
1 85%
Loading events...
Proxy Abuser 084c7883acde w4m_singapore_01 · 2026-10-18 20:03
1 85%
Loading events...
Proxy Abuser d11f5352c4ae w4m_singapore_01 · 2026-10-18 19:39
1 85%
Loading events...
Proxy Abuser cd412cc55e71 w4m_singapore_01 · 2026-10-18 19:05
1 85%
Loading events...
Proxy Abuser d349977ac472 w4m_singapore_01 · 2026-10-18 18:39
1 85%
Loading events...
Proxy Abuser e05a2f4868a5 w4m_singapore_01 · 2026-10-18 18:06
1 85%
Loading events...
Proxy Abuser e9129fb4c4ec w4m_singapore_01 · 2026-10-18 17:34
1 85%
Loading events...
Proxy Abuser 6f3eee1293b1 w4m_singapore_01 · 2026-10-18 17:04
1 85%
Loading events...
Proxy Abuser 8d8e7d49e409 w4m_singapore_01 · 2026-10-18 16:39
1 85%
Loading events...
Proxy Abuser 41e060966727 w4m_singapore_01 · 2026-10-18 16:05
1 85%
Loading events...
Proxy Abuser 3ec34babcf43 w4m_singapore_01 · 2026-10-18 15:35
1 85%
Loading events...
Proxy Abuser 51f5e0e294a6 w4m_singapore_01 · 2026-10-18 15:06
1 85%
Loading events...
Proxy Abuser 462d9be37e05 w4m_singapore_01 · 2026-10-18 14:35
1 85%
Loading events...
Proxy Abuser 0cd7366124fb w4m_singapore_01 · 2026-10-18 14:03
1 85%
Loading events...
Proxy Abuser c69f7d3f349c w4m_singapore_01 · 2026-10-18 13:33
1 85%
Loading events...
Proxy Abuser 9792f01a21fd w4m_singapore_01 · 2026-10-18 13:09
1 85%
Loading events...
Proxy Abuser 8709b820da94 w4m_singapore_01 · 2026-10-18 12:34
1 85%
Loading events...
Proxy Abuser 1bf1507c0e3a w4m_singapore_01 · 2026-10-18 12:10
1 85%
Loading events...
Proxy Abuser 4be1d5cb2920 w4m_singapore_01 · 2026-10-18 11:39
1 85%
Loading events...
Proxy Abuser 95fa38212b51 w4m_singapore_01 · 2026-10-18 11:06
1 85%
Loading events...
Proxy Abuser 27a41e7dd337 w4m_singapore_01 · 2026-10-18 10:34
1 85%
Loading events...
Proxy Abuser c8ceb0fc628e w4m_singapore_01 · 2026-10-18 10:03
1 85%
Loading events...
Proxy Abuser 4ebfb2531dec w4m_singapore_01 · 2026-10-18 09:35
1 85%
Loading events...
Proxy Abuser c47ed698ec7a w4m_singapore_01 · 2026-10-18 09:06
1 85%
Loading events...
Proxy Abuser 99c81cb5a0bf w4m_singapore_01 · 2026-10-18 08:36
1 85%
Loading events...
Proxy Abuser 406122c1ea89 w4m_singapore_01 · 2026-10-18 08:05
1 85%
Loading events...