← Back to feed

AS46606 Unified Layer

ASN Active medium
Why this campaign was detected
5 IPs from the same network (Unified Layer, AS46606) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS46606 · Unified Layer
Subnet
Country
πŸ‡ΊπŸ‡Έ US
Cloud Provider
Member Count
5 IPs
Below average
Total Events
1639
Below average by volume
Started / Ended
2026-02-28 03:20 — 2026-04-24 17:26
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
162.240.218.183 credential_harvester 50% 1x OSINT 1620 1 ssh:bruteforce β€” 2026-09-01 11:54 evidence →
162.240.238.24 reconnaissance 34% 1x OSINT 16 1 ssh:bruteforce β€” 2026-08-27 09:17 evidence →
162.240.175.202 credential_probe 20% 13 1 ssh:bruteforce β€” 2026-08-29 07:07 evidence →
162.144.44.29 credential_probe 18% 10 1 ssh:bruteforce β€” 2026-08-28 19:18 evidence →
162.241.215.29 credential_probe 18% 1x OSINT 20 1 ssh:bruteforce β€” 2026-08-24 07:24 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics β€” cookieless, public pages only. The context processor withholds the token from authenticated requests. #}