← Back to feed

AS20115 Charter Communications LLC

ASN Active medium
Why this campaign was detected
9 IPs from the same network (Charter Communications LLC, AS20115) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS20115 · Charter Communications LLC
Subnet
—
Country
πŸ‡ΊπŸ‡Έ US
Cloud Provider
—
Member Count
9 IPs
Below average
Total Events
3108
Below average by volume
Started / Ended
2026-08-17 07:06 — ongoing
Attack Types
http:scan ssh:bruteforce ssh:connection ssh:malware telnet:bruteforce telnet:connection telnet:intrusion
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Execution
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
97.93.43.157 credential_harvester 83% 1x OSINT 2965 3 ssh:bruteforcessh:connectionssh:malware syn-097-093-043-157.biz.spectrum.com 2026-10-21 20:37 evidence →
71.90.30.53 scanner 59% 1x OSINT 99 4 telnet:bruteforcetelnet:connection syn-071-090-030-053.res.spectrum.com 2026-10-17 13:41 evidence →
71.9.208.228 scanner 39% 1x OSINT 4 2 telnet:connection syn-071-009-208-228.res.spectrum.com 2026-10-22 10:14 evidence →
24.151.46.162 interactive_operator 35% 14 1 telnet:intrusion syn-024-151-046-162.res.spectrum.com 2026-10-16 20:28 evidence →
96.37.36.199 scanner 33% 8 1 ssh:connectiontelnet:connection syn-096-037-036-199.res.spectrum.com 2026-10-22 05:00 evidence →
75.140.246.19 scanner 33% 4 1 ssh:connectiontelnet:connection syn-075-140-246-019.res.spectrum.com 2026-10-22 08:47 evidence →
35.144.50.130 scanner 31% 8 1 ssh:connectiontelnet:connection syn-035-144-050-130.res.spectrum.com 2026-10-20 23:16 evidence →
66.190.11.178 web_probe 25% 2 1 http:scan syn-066-190-011-178.res.spectrum.com 2026-10-21 11:18 evidence →
71.88.153.75 scanner 24% 4 1 telnet:connection syn-071-088-153-075.res.spectrum.com 2026-10-21 23:13 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds