← Back to feed
AS22773 Cox Communications Inc.
ASN Ended mediumWhy this campaign was detected
6 IPs from the same network (Cox Communications Inc., AS22773) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS22773 · Cox Communications Inc.
Subnet
—
Country
πΊπΈ US
Cloud Provider
—
Member Count
6 IPs
Below average
Total Events
26
Below average by volume
Started / Ended
2026-02-18 10:01 — 2026-04-22 02:45
Attack Types
MITRE ATT&CK Techniques
Initial Access
Discovery
Member Actors
| IP Address | Behavior | Confidence | Flags | Events | Agents | Attack Types | Hostname | Last Seen | |
|---|---|---|---|---|---|---|---|---|---|
| 98.176.69.13 | scanner | 22% | 8 | 2 | ssh:bruteforce | β | 2026-08-13 03:19 | evidence → | |
| 70.186.230.2 | web_probe | 14% | 2 | 1 | http:scan | β | 2026-08-10 03:55 | evidence → | |
| 72.213.215.39 | scanner | 12% | 4 | 1 | ssh:bruteforce | β | 2026-08-11 04:58 | evidence → | |
| 174.68.176.96 | scanner | 12% | 4 | 1 | ssh:bruteforce | β | 2026-08-12 20:48 | evidence → | |
| 72.195.138.237 | scanner | 12% | 4 | 1 | ssh:bruteforce | β | 2026-08-09 23:58 | evidence → | |
| 72.210.69.232 | scanner | 12% | 4 | 1 | ssh:bruteforce | β | 2026-08-12 05:20 | evidence → |
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds