← Back to feed

AS29518 Bredband2 AB

ASN Active medium
Why this campaign was detected
5 IPs from the same network (Bredband2 AB, AS29518) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS29518 · Bredband2 AB
Subnet
—
Country
πŸ‡ΈπŸ‡ͺ SE
Cloud Provider
—
Member Count
5 IPs
Below average
Total Events
238
Below average by volume
Started / Ended
2026-09-25 13:48 — ongoing
Attack Types
ssh:bruteforce ssh:malware telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Initial Access
Credential Access
Discovery
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
83.233.149.38 credential_harvester 81% 1x OSINT 755 3 ssh:bruteforcessh:connectionssh:malware 83-233-149-38.cust.bredband2.com 2026-10-17 15:47 evidence →
83.233.22.227 scanner 45% 1x OSINT 8 3 telnet:connection 83-233-22-227.cust.bredband2.com 2026-10-14 00:29 evidence →
95.155.249.110 scanner 11% 2 1 telnet:connection h95-155-249-110.cust.bredband2.com 2026-10-05 21:47 evidence →
77.53.85.128 scanner 11% 2 1 telnet:connection h77-53-85-128.cust.bredband2.com 2026-10-07 21:56 evidence →
83.233.22.224 scanner 11% 2 1 telnet:connection 83-233-22-224.cust.bredband2.com 2026-10-08 00:42 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds