185.181.60.198 has a low threat confidence level of 30%, originating from Sandefjord, Norway, on the Gigahost AS network (56655). It has been observed across 2 sessions targeting SSH, First observed on February 17, 2026, most recently active February 17, 2026.