← Back to feed

AS7922 Comcast Cable Communications, LLC

ASN Active medium
Why this campaign was detected
27 IPs from the same network (Comcast Cable Communications, LLC, AS7922) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS7922 · Comcast Cable Communications, LLC
Subnet
—
Country
πŸ‡ΊπŸ‡Έ US
Cloud Provider
—
Member Count
27 IPs
Below average
Total Events
9654
Below average by volume
Started / Ended
2026-02-19 11:56 — 2026-04-23 00:07
Attack Types
ssh:bruteforce ssh:connection ssh:intrusion ssh:malware telnet:bruteforce telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Execution
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
96.78.175.36 credential_harvester 84% 1x OSINT 5738 3 ssh:bruteforcessh:connectionssh:intrusionssh:malware β€” 2026-10-19 06:08 evidence →
71.27.86.44 credential_harvester 83% 1x OSINT 3655 3 ssh:bruteforcessh:connectionssh:malware β€” 2026-10-18 16:15 evidence →
76.129.23.151 credential_harvester 68% 2x OSINT 36 3 ssh:bruteforcessh:connectiontelnet:bruteforcetelnet:connection c-76-129-23-151.hsd1.ga.comcast.net 2026-10-18 06:34 evidence →
73.21.133.161 credential_harvester 50% 1x OSINT 85 1 ssh:bruteforcessh:intrusion c-73-21-133-161.hsd1.fl.comcast.net 2026-10-17 04:09 evidence →
68.34.75.233 scanner 41% 8 2 ssh:connectiontelnet:connection c-68-34-75-233.hsd1.mi.comcast.net 2026-10-18 06:27 evidence →
98.237.128.175 scanner 40% 12 2 ssh:connectiontelnet:connection β€” 2026-10-17 13:15 evidence →
174.176.139.214 reconnaissance 35% 8 1 telnet:intrusion c-174-176-139-214.hsd1.fl.comcast.net 2026-10-18 06:40 evidence →
67.175.242.240 scanner 33% 20 2 ssh:connectiontelnet:connection β€” 2026-10-13 05:56 evidence →
76.129.229.139 scanner 33% 4 1 ssh:connectiontelnet:connection β€” 2026-10-19 02:01 evidence →
73.73.28.165 scanner 32% 4 1 ssh:connectiontelnet:connection c-73-73-28-165.hsd1.il.comcast.net 2026-10-19 00:47 evidence →
174.53.78.185 scanner 31% 8 1 ssh:connectiontelnet:connection β€” 2026-10-17 20:33 evidence →
73.254.79.9 scanner 29% 4 1 ssh:connectiontelnet:connection c-73-254-79-9.hsd1.wa.comcast.net 2026-10-17 05:07 evidence →
68.46.176.204 scanner 29% 6 1 ssh:connectiontelnet:connection β€” 2026-10-16 18:08 evidence →
73.57.165.217 scanner 29% 4 1 ssh:connectiontelnet:connection β€” 2026-10-17 01:31 evidence →
71.62.97.212 scanner 28% 12 1 ssh:connectiontelnet:connection c-71-62-97-212.hsd1.va.comcast.net 2026-10-15 21:11 evidence →
50.199.81.66 scanner 28% 6 2 telnet:connection β€” 2026-10-15 13:34 evidence →
174.171.225.111 scanner 27% 6 1 ssh:connectiontelnet:connection β€” 2026-10-15 19:14 evidence →
174.163.24.44 scanner 24% 4 1 ssh:connectiontelnet:connection c-174-163-24-44.hsd1.ga.comcast.net 2026-10-14 09:43 evidence →
73.184.161.151 scanner 24% 4 1 ssh:connectiontelnet:connection c-73-184-161-151.hsd1.ga.comcast.net 2026-10-14 06:37 evidence →
67.177.164.213 scanner 24% 6 1 ssh:connectiontelnet:connection c-67-177-164-213.hsd1.ky.comcast.net 2026-10-13 21:19 evidence →
67.167.65.62 scanner 23% 4 1 telnet:connection c-67-167-65-62.hsd1.il.comcast.net 2026-10-17 23:58 evidence →
76.110.127.50 scanner 18% 4 1 ssh:connection c-76-110-127-50.hsd1.fl.comcast.net 2026-10-15 12:29 evidence →
76.110.132.80 scanner 17% 4 1 ssh:connection c-76-110-132-80.hsd1.fl.comcast.net 2026-10-14 22:45 evidence →
73.130.41.107 scanner 16% 4 1 ssh:connection c-73-130-41-107.hsd1.pa.comcast.net 2026-10-14 17:10 evidence →
76.111.157.170 scanner 14% 2 1 telnet:connection c-76-111-157-170.hsd1.md.comcast.net 2026-10-13 16:00 evidence →
24.130.113.236 scanner 13% 4 1 telnet:connection c-24-130-113-236.hsd1.ca.comcast.net 2026-10-12 15:29 evidence →
73.65.74.9 scanner 12% 2 1 telnet:connection c-73-65-74-9.hsd1.mn.comcast.net 2026-10-12 18:55 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds