← Back to feed

AS262954 VirtuaServer Informatica Ltda

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (VirtuaServer Informatica Ltda, AS262954) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS262954 · VirtuaServer Informatica Ltda
Subnet
Country
🇧🇷 BR
Cloud Provider
Member Count
5 IPs
Below average
Total Events
140
Below average by volume
Started / Ended
2026-05-14 03:53 — 2026-06-22 17:58
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Credential Access
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
186.226.62.56 credential_harvester 32% 84 2 ssh:bruteforce 2026-05-16 17:51 evidence →
186.226.58.147 credential_harvester 20% 14 1 ssh:bruteforce 2026-05-14 05:40 evidence →
186.226.61.10 credential_harvester 20% 14 1 ssh:bruteforce 2026-05-14 07:48 evidence →
186.226.58.192 credential_harvester 20% 14 1 ssh:bruteforce 2026-05-14 11:36 evidence →
186.226.61.34 credential_harvester 20% 14 1 ssh:bruteforce 2026-05-14 04:29 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}