JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 76.38.1.71

76.38.1.71 was found in our database!

This IP was reported 15 times. Confidence of Abuse is 34%: ?

34%

ISP	Charter Communications Inc
Usage Type	Fixed Line ISP
ASN	AS11426
Hostname(s)	syn-076-038-001-071.res.spectrum.com
Domain Name	charter.com
Country	🇺🇸 United States of America
City	Oxford, North Carolina

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 76.38.1.71

Whois 76.38.1.71

IP Abuse Reports for 76.38.1.71:

This IP address has been reported a total of 15 times from 9 distinct sources. 76.38.1.71 was first reported on August 18th 2026, and the most recent report was 3 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇭 ALPHANET	2026-11-05 17:30:17 (3 minutes ago)	Botnet or web spider not respecting robots.txt	DDoS Attack Exploited Host
🇩🇪 filstal.org	2026-10-24 01:07:51 (1 week ago)	Brute-force/Enumeration: Multiple login attempts for non-existent mail accounts (Honeytrap).	Email Spam Brute-Force
🇩🇪 BULLSEYE	2026-10-23 12:01:56 (1 week ago)	Automated IMAP security detection from MailEnable logs. Observed patterns: LOGIN fails=1, AUTHENTICA ... show more Automated IMAP security detection from MailEnable logs. Observed patterns: LOGIN fails=1, AUTHENTICATE fails=2, Scanner/Probe=0; Score=6 (weights: login=2, auth=2, scan=2). Top: AUTH_FAIL:CRAM-MD5=1, AUTH_FAIL:LOGIN=1, LOGIN_FAIL=1 (possible IMAP brute-force/credential stuffing). Traffic characteristics strongly indicate automated malicious activity against IMAP. show less	Port Scan Brute-Force
🇺🇸 snappic	2026-10-21 09:59:05 (2 weeks ago)	1,000 requests in 1h (scanning for credentials and .env files)	Bad Web Bot Web App Attack
🇩🇪 LRob	2026-10-15 00:34:43 (3 weeks ago)	Calendar filter flood (L7 DDoS) \| host: www.escrimeaura.fr \| path: /calendrier-2/action~agenda/time_ ... show more Calendar filter flood (L7 DDoS) \| host: www.escrimeaura.fr \| path: /calendrier-2/action~agenda/time_limit~1762815600/cat_ids~207/tag_ids~668,425,576,540,233,343,260/request_format~json/ \| src_port: 10456 show less	DDoS Attack Web App Attack
🇺🇸 鬼影233	2026-10-01 07:37:17 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 06:06:45 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-24 05:17:53 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 Edg/145.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-23 08:30:59 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 Edg/144.0.0.0 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 23:14:54 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-21 11:29:18 (1 month ago)	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0. ... show more Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 鬼影233	2026-09-20 00:04:43 (1 month ago)	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Sa ... show more Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36 show less	Bad Web Bot
🇺🇸 TPI-Abuse	2026-09-19 20:48:40 (1 month ago)	(mod_security) mod_security (id:210730) triggered by 76.38.1.71 (syn-076-038-001-071.res.spectrum.co ... show more (mod_security) mod_security (id:210730) triggered by 76.38.1.71 (syn-076-038-001-071.res.spectrum.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 16:48:24.205808 2026] [security2:error] [pid 25513:tid 25513] [client 76.38.1.71:9348] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|ctjcisenate.org\|F\|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "ctjcisenate.org"] [uri "/www/backup.sql"] [unique_id "aq71GAEhnK80oGKpPWm1lwAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 Zandro	2026-09-03 13:00:14 (2 months ago)	distributed harvester	DDoS Attack Bad Web Bot Exploited Host
Anonymous	2026-08-18 04:58:48 (2 months ago)	Distributed scraper residential proxy pool — www.pearlriverwines.com /store/filtered/ (WineCommerce ... show more Distributed scraper residential proxy pool — www.pearlriverwines.com /store/filtered/ (WineCommerce WAF) show less	DDoS Attack Bad Web Bot Exploited Host

Showing 1 to 15 of 15 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇪 185.213.154.233

🇨🇳 183.230.9.103

🇹🇼 114.44.228.186

🇧🇪 35.187.191.25

🇺🇸 34.73.165.96

🇷🇴 2.57.121.112

🇷🇺 213.222.255.204

🇳🇱 195.178.110.30

🇨🇳 180.115.52.81

🇰🇼 37.231.90.140

🇺🇸 206.204.3.240

🇨🇦 144.217.61.131

🇮🇹 103.241.66.50

🇺🇸 18.97.26.101

🇺🇸 18.97.5.66

🇨🇴 177.93.61.202

🇺🇸 107.149.8.43

🇺🇸 54.85.7.119

🇸🇬 47.82.55.243

🇺🇸 213.188.82.213