JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 47.38.160.70

47.38.160.70 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 52%: ?

52%

ISP	Charter Communications LLC
Usage Type	Fixed Line ISP
ASN	AS20115
Hostname(s)	syn-047-038-160-070.res.spectrum.com
Domain Name	charter.com
Country	🇺🇸 United States of America
City	Fort Worth, Texas

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 47.38.160.70

Whois 47.38.160.70

IP Abuse Reports for 47.38.160.70:

This IP address has been reported a total of 15 times from 11 distinct sources. 47.38.160.70 was first reported on September 24th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 TPI-Abuse	2026-10-22 17:16:21 (1 hour ago)	(mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum. ... show more (mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 13:16:16.419917 2026] [security2:error] [pid 24631:tid 24631] [client 47.38.160.70:40314] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|celebritybikinigossip.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "celebritybikinigossip.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atpE4KNcRSjrKaOXFcj50gAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-10-21 21:12:17 (21 hours ago)	Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)	Hacking
🇺🇸 TPI-Abuse	2026-10-21 20:51:23 (22 hours ago)	(mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum. ... show more (mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 16:51:18.667130 2026] [security2:error] [pid 13309:tid 13309] [client 47.38.160.70:59970] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|ussthresher.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "ussthresher.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "atklxvys1Lk4U4Auz6x99AAAABA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-10-15 00:36:27 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum. ... show more (mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 20:36:19.693493 2026] [security2:error] [pid 4972:tid 4972] [client 47.38.160.70:33448] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|oogeothermal.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "oogeothermal.com"] [uri "/wp-json/wp/v2/users"] [unique_id "atAgAwuj1TXTlyDMunXRLwAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 mnsf	2026-10-14 16:05:04 (1 week ago)	Too many Status 40X (11)	Brute-Force Web App Attack
🇬🇧 SCLwebadministrator	2026-10-13 10:24:00 (1 week ago)	Bruteforce WordPress logins	Brute-Force Web App Attack Hacking
🇮🇹 sssrit	2026-10-11 14:50:44 (1 week ago)	47.38.160.70 - - [11/Oct/2026:16:50:43 +0200] "POST /wp-login.php HTTP/2.0" 401 4725 "https://onida. ... show more 47.38.160.70 - - [11/Oct/2026:16:50:43 +0200] "POST /wp-login.php HTTP/2.0" 401 4725 "https://onida.sssr.it/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" ... show less	Web App Attack
🇺🇸 TPI-Abuse	2026-10-11 00:14:33 (1 week ago)	(mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum. ... show more (mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:14:29.917246 2026] [security2:error] [pid 14233:tid 14233] [client 47.38.160.70:36734] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|kontikimotorcycles.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "kontikimotorcycles.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asrU5UyjCx99FFsA9UmHFgAAAAQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Mundo Bueno	2026-10-09 16:27:00 (1 week ago)	[ISILIA Protection v2.3] Tentative d'accès: /wp-json/wp/v2/users/me [RATE LIMITED - 1800s quarantine ... show more [ISILIA Protection v2.3] Tentative d'accès: /wp-json/wp/v2/users/me [RATE LIMITED - 1800s quarantine] \| Pays: US \| UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0. show less	Hacking Web App Attack
🇺🇸 TPI-Abuse	2026-10-08 16:54:09 (2 weeks ago)	(mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum. ... show more (mod_security) mod_security (id:225170) triggered by 47.38.160.70 (syn-047-038-160-070.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:54:05.903522 2026] [security2:error] [pid 7892:tid 7892] [client 47.38.160.70:37126] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)\|\|nwtree.com\|F\|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "nwtree.com"] [uri "/wp-json/wp/v2/users/me"] [unique_id "asfKrTT9WEGD2bdPY6JDEgAAACg"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 big-cloud.nl	2026-10-04 01:09:17 (2 weeks ago)	Try to access /xmlrpc.php	Web App Attack
🇷🇺 AbuseIPDB informer	2026-10-03 17:09:37 (2 weeks ago)	nfdump top talker: 47.38.160.70 \| first seen 2026-10-03 20:09:37.664 \| duration 00:00:00.062 \| flows ... show more nfdump top talker: 47.38.160.70 \| first seen 2026-10-03 20:09:37.664 \| duration 00:00:00.062 \| flows=4 \| packets=101277 \| bytes=99.2 M \| pps=1628 \| bps=12.8 M \| bpp=979 \| proto=udp show less	DDoS Attack Port Scan Exploited Host
🇨🇿 lp	2026-09-30 12:24:23 (3 weeks ago)	Unauthorized VPN login attempts: 1 attempts were recorded from 47.38.160.70 2026-09-30T14:15:05+02:0 ... show more Unauthorized VPN login attempts: 1 attempts were recorded from 47.38.160.70 2026-09-30T14:15:05+02:00 vpn Access-Reject 'poul00' station: 47.38.160.70 auth-type: - realm: vse.cz nas: <redacted> called: <redacted> => address-pool: - msg: '<redacted>' show less	Brute-Force Web App Attack
🇨🇿 Countryman	2026-09-29 00:10:02 (3 weeks ago)	repeated unauthorized VPN login attempt, user sweep	VPN IP Hacking Brute-Force
🇺🇸 wordpresshosting.solutions	2026-09-24 08:26:00 (4 weeks ago)	WordPress login/xmlrpc abuse or user enumeration detected. Evidence: [IP] - - [24/Sep/2026:08:25:59 ... show more WordPress login/xmlrpc abuse or user enumeration detected. Evidence: [IP] - - [24/Sep/2026:08:25:59 +0000] "GET /wp-login.php HTTP/1.1" 200 9937 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[IP] Safari/537.36" [IP] - - [24/Sep/2026:08:25:59 +0000] "POST /wp-login.php HTTP/1.1" 200 5306 "https://[DOMAIN]/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/[IP] Safari/537.36" show less	Brute-Force Web App Attack

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.50.171.246

🇩🇪 185.220.101.60

🇩🇪 185.220.101.6

🇵🇦 179.43.153.2

🇦🇺 149.28.161.82

🇰🇪 105.164.128.156

🇺🇸 66.132.172.141

🇸🇬 47.128.42.139

🇺🇸 40.124.116.107

🇧🇪 207.175.36.176

🇧🇷 186.211.99.78

🇩🇪 185.220.101.59

🇩🇪 185.220.101.58

🇩🇪 185.220.101.57

🇲🇽 177.226.40.150

🇧🇷 177.10.160.46

🇸🇪 171.25.158.169

🇰🇷 119.209.12.20

🇨🇳 112.111.147.89

🇫🇷 85.217.140.49