← Back to feed

Subnet 83.233.22.0/24

SUBNET Active high
Why this campaign was detected
3 IPs from the same /24 subnet (83.233.22.0/24) were observed attacking our sensors within the same time window. All belong to Bredband2 AB (AS29518). Concentrated activity from adjacent IPs is a strong indicator of a single operator or coordinated botnet.
Primary ASN
AS29518 · Bredband2 AB
Subnet
83.233.22.0/24
Country
πŸ‡ΈπŸ‡ͺ SE
Cloud Provider
—
Member Count
3 IPs
Below average
Total Events
20
Below average by volume
Started / Ended
2026-09-25 13:48 — ongoing
Attack Types
telnet:connection
MITRE ATT&CK Techniques
Reconnaissance
Discovery
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
83.233.22.227 scanner 45% 1x OSINT 8 3 telnet:connection 83-233-22-227.cust.bredband2.com 2026-10-14 00:29 evidence →
83.233.22.225 scanner 28% 18 2 telnet:connection 83-233-22-225.cust.bredband2.com 2026-10-15 01:19 evidence →
83.233.22.224 scanner 11% 2 1 telnet:connection 83-233-22-224.cust.bredband2.com 2026-10-08 00:42 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds