← Back to feed
179.43.153.18
TAGGED SUSPICIOUS how we decide →
Why: Our sensors observed credential harvester sessions · certainty: inferred
undefined.hostname.localhost
✗ FCrDNS
Assessment
SSH password brute-forcer
- Logged in with 2 different credentials across 4 logins.
- Ran 4 commands on the host.
- Part of a 393-IP campaign probing the same targets.
Generated from the counts on this page by fixed rules; each line cites the number it rests on.
Location
🇨🇭 CH / Rümlang
ASN
AS51852 · Private Layer INC
Cloud Provider
—
Total Events
1496
Top 5% by volume
Agent Count
2
First / Last Seen
2026-10-26 23:39 — 2026-10-29 16:44
Attack Types
MITRE ATT&CK Techniques
Initial Access
Execution
External Corroboration
Blocklist.de
blocklist_de:reported
DShield Top Attackers
dshield:top_attacker
Campaigns
Subnet 179.43.153.0/24
SUBNET
Active
high
🇨🇭 CH
3 IPs
3563 events
ssh:bruteforcessh:connectionssh:intrusion
2026-10-12 — ongoing · 3 IPs from the same /24 subnet (179.43.153.0/24) were observed attacking our sensors within the same time window. …
Multi-Agent Scan
SCAN
Active
medium
338 IPs
906579 events
2026-09-27 — ongoing · 338 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
345 IPs
946188 events
2026-03-03 — ongoing · 345 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan
SCAN
Active
medium
393 IPs
1286997 events
2026-03-02 — ongoing · 393 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
AS51852 Private Layer INC
ASN
Active
medium
🇨🇭 CH
6 IPs
113587 events
ssh:bruteforcessh:connectionssh:credential-reusessh:intrusionssh:malwaressh:proxy-abuse
2026-02-28 — ongoing · 6 IPs from the same network (Private Layer INC, AS51852) were active during overlapping time periods. Temporal correlation …
Session Forensics
Sessions
299 (4 with login)
Avg Depth Score
0.2
Commands Executed
4
Files Downloaded
0
Notable Commands
- /bin/./uname -s -v -n -r -m
Fingerprints
1 SSH client banner · 1 HASSH fingerprint
HASSH
SSH Client
Evidence Timeline