73.153.3.78📋 Copy

## IPDEBRIEF INTELLIGENCE BRIEFING

Target IP: 73.153.3.78/32

Classification: High-Risk Residential Cable

Report Date: 2026-06-23

---

EXECUTIVE SUMMARY

IP address 73.153.3.78 is classified as High Risk (risk score: 70/100) and is associated with Comcast Cable Communications, LLC (ASN 7922). The IP is geolocated to Denver, Colorado, USA, operating as a residential cable connection. The IP is currently listed on 3 DNS blacklists out of 8 total listings with high-severity classifications observed in recent activity.

---

OWNERSHIP & NETWORK CLASSIFICATION

---

THREAT INTELLIGENCE

Current Status:

• Risk Score: 70/100 (High)
• DNSBL Listings: 3/8 total blacklists
• Operator Score: 0.2609 (Basic operator classification)
• Threat Indicators: No active campaign matches; no Tor exit node, proxy, or VPN indicators
• Known Attacker: No

Recent Activity (Signal History - 21 observations):

• Most recent signal (2026-06-23): Multiple blacklist listings with "high" severity designation (4 out of 8 total lists)
• Historical signals from 2026-06-18: Consistent geolocation and routing observations
• Trend: IP has been persistently observed with elevated risk characteristics

---

NEIGHBORHOOD ANALYSIS

Subnet: 73.153.3.78/24

Abuse Density: 1.0 (Maximum)

Classification: mostly_clean (subnet-level)

Total Siblings: 2

Threat Siblings: 1

High-Risk Neighbor Detected:

• IP: 73.153.3.166
• Risk Score: 80/100
• Authority Score: 60/100

The /24 subnet exhibits elevated abuse density with one additional high-risk IP address.

---

SERVICE FINGERPRINT

No HTTP/web services or TLS certificates detected.

---

RELATIONSHIP GRAPH

Key Associations:

• DNS Hostnames: c-73-153-3-78.hsd1.co.comcast.net (27 relationship entries)
• Network: CABLE-1 (multiple same-network associations)
• No External Links: No certificate or organization relationships detected

---

RECOMMENDED ACTIONS

Immediate:

1. Increase logging verbosity and review recent activity from this IP address

2. Block traffic from 73.153.3.78/32 at perimeter firewall

Firewall Implementation Rules:

iptables:

```bash

iptables -A INPUT -s 73.153.3.78 -j DROP

```

nftables:

```bash

nft add rule inet filter input ip saddr 73.153.3.78 drop

```

Cloudflare WAF:

```json

{

"description": "Block 73.153.3.78 — IPDebrief risk score 70",

"action": "block",

"filter": {"expression": "ip.src eq 73.153.3.78"}

}

```

AWS WAF:

```json

{

"Addresses": ["73.153.3.78/32"],

"Description": "IPDebrief risk 70"

}

```

---

ANALYST NOTES

This IP address represents a Comcast residential cable connection with an elevated risk profile. The combination of high DNSBL listings, high abuse density in the /24 subnet, and a high-risk neighbor (73.153.3.166, score 80) suggests potential malicious activity or compromised endpoint behavior.

Recommendation: Block at perimeter firewall and monitor for additional related activity from the 73.153.3.0/24 subnet. Consider correlation with other indicators from the neighboring IP 73.153.3.166 for broader threat assessment.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.