← Back to feed

179.43.186.241

Threat Confidence
53%
Location
🇨🇭 CH / Rümlang
ASN
AS51852 · Private Layer INC
Cloud Provider
—
Total Events
18
Average by volume
Agent Count
2
First / Last Seen
2026-04-03 09:22 — 2026-04-03 15:10
Attack Types
ssh:bruteforce
External Corroboration
Blocklist.de
Reported 2026-04-03 16:36
blocklist_de:reported
Campaigns
Multi-Agent Scan SCAN Active medium
30 IPs 2745 events
2026-03-21 — ongoing · 30 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
46 IPs 2818 events
2026-02-27 — ongoing · 46 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
62 IPs 15183 events
2026-02-27 — ongoing · 62 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Linode. Scanning the same …
Multi-Agent Scan SCAN Active medium
97 IPs 141047 events
2026-02-27 — ongoing · 97 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
57 IPs 10684 events
2026-02-27 — ongoing · 57 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
98 IPs 142561 events
2026-02-27 — ongoing · 98 IPs independently targeted the same honeypot sensors within a 24-hour window. Hosted on Azure. Scanning the same …
Multi-Agent Scan SCAN Active medium
45 IPs 35542 events
2026-02-27 — ongoing · 45 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
99 IPs 144237 events
2026-02-27 — ongoing · 99 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Multi-Agent Scan SCAN Active medium
32 IPs 1746 events
2026-02-24 — ongoing · 32 IPs independently targeted the same honeypot sensors within a 24-hour window. Scanning the same targets in close …
Session Forensics
reconnaissance ×1 credential_harvester ×2
Sessions
3 (1 with login)
Avg Depth Score
0.43
Commands Executed
1
Files Downloaded
0
Notable Commands
Fingerprints
HASSH
16443846184eafde36765c9bab2f4397
SSH Client
SSH-2.0-Go
Recent Events (last 50)
Timestamp Port Proto Event Location
2026-04-03 15:10:53 :22 ssh cowrie.session.closed sin
2026-04-03 15:10:53 :22 ssh cowrie.log.closed sin
2026-04-03 15:10:53 :22 ssh cowrie.command.input sin
2026-04-03 15:10:53 :22 ssh cowrie.session.params sin
2026-04-03 15:10:53 :22 ssh cowrie.login.success sin
2026-04-03 15:10:52 :22 ssh cowrie.client.kex sin
2026-04-03 15:10:52 :22 ssh cowrie.client.version sin
2026-04-03 15:10:52 :22 ssh cowrie.session.connect sin
2026-04-03 12:51:29 :22 ssh cowrie.session.closed sea
2026-04-03 12:51:29 :22 ssh cowrie.login.failed sea
2026-04-03 12:51:28 :22 ssh cowrie.client.kex sea
2026-04-03 12:51:28 :22 ssh cowrie.client.version sea
2026-04-03 12:51:28 :22 ssh cowrie.session.connect sea
2026-04-03 09:22:26 :22 ssh cowrie.session.closed sin
2026-04-03 09:22:26 :22 ssh cowrie.login.failed sin
2026-04-03 09:22:25 :22 ssh cowrie.client.kex sin
2026-04-03 09:22:25 :22 ssh cowrie.client.version sin
2026-04-03 09:22:25 :22 ssh cowrie.session.connect sin