IOC Radar
IPMediumSignal 22/100

68.83.215.143

Location
United StatesUnited States
Dunkirk, MD
ASN
AS7922
Comcast Cable Communications, Inc.
First Seen
Dec 29, 2024
Last Seen
Apr 7, 2026
Dec 29
First Seen
537d ago
Apr 7
Last Seen
73d ago
7
Reports
source reports
22%
Confidence
medium
Found in 7 reports. Confidence: medium. · Confidence scores are heuristic. Verify before acting on results.
IPv4 Address
Network layer indicator observed in threat reports.
MISP Category
Network Activity
Confidence
22%
Signal Score
22 / 100
IDS Rule
No
Threat Context
Tags
MITRE ATT&CK

MITRE ATT&CK TTPs

19 techniques

Network Information

CountryUSUnited States
RegionDunkirk, MD
ASNAS7922
OrganizationComcast Cable Communications, Inc.

Feed Intelligence Summary

7 reports22% confidence
7
Source reports
22%
Confidence score
Category tags
abuseaccess controlactive scanactive scanningaustraliaauthenticationbad reputationbotnetbotnet activitybrute forcebrute force attemptcommand and controlcredential accesscredential stuffingdata exfiltrationdata store exposuredistributed attacksexploitation activityidentity & access exploitationindicatorinjection activitymalicious activitymalicious softwaremalwarenetworknetwork securitynorth americaoceaniapassword attackprocess injectionreconnaissanceremote accessresearchedscannersecurity policyssh attackt1021.004t1055t1071.001t1078t1078.004t1110t1110.001t1110.002t1110.003t1486t1496t1499.002t1499.003t1565t1588.004t1589.002t1595.001t1595.002t1595.003threat actorthreat preventiontor nodeunited statesunited states of americaus

Activity Timeline

1 total obs
Apr 7Apr 7

Threat Activity Heatmap

· Peak: 2026-04-07
Less
More
Mon
Wed
Fri
Jun
·
·
Jul
·
·
·
Aug
·
·
·
Sep
·
·
·
·
Oct
·
·
·
Nov
·
·
·
Dec
·
·
·
·
Jan
·
·
·
Feb
·
·
·
Mar
·
·
·
·
Apr
·
·
·
May
·
·
·
Jun
·
24h
0
Dormant
7d
0
Dormant
30d
0
Dormant
3mo
1
Minimal
Threat ScoreLow Risk
22
SIGNAL
Signal Score
22%
Confidence
7
Reports
First seenDec 29, 2024
Last seenApr 7, 2026
GeolocationUS
CountryUnited States
LocationDunkirk, MD
ASNAS7922
OrgComcast Cable Communications, Inc.
Coords38.5336, -76.5955

VirusTotal

Not checked

WHOIS

description
Host bruteforcing SSH
raw
Comcast Cable Communications, LLC JUMPSTART-2 (NET-68-80-0-0-1) 68.80.0.0 - 68.87.255.255 Comcast Cable Communications, Inc. DC-7 (NET-68-83-208-0-1) 68.83.208.0 - 68.83.223.255
references
https://redpiranha.net

Export & API

STIX 2.1 Bundle
CSV Export
Permalink

IOC Journey

medium
First detected 1 year ago · Last seen 2 months ago
Appeared in 7 threat reports