71.6.238.116

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse confidence score ?
49% Elevated
57 reports
36 reporters ยท latest 1 day ago
ISP Root Evidence, Inc
Usage Type Data Center/Web Hosting/Transit
ASN AS10439
Hostname(s) rootevidence.com
Domain Name rootevidence.com
Country ๐Ÿ‡บ๐Ÿ‡ธ United States of America
City Los Angeles, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Log in to view charts and search reports for this IP. Log In

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview
Account required for the enhanced features Log in Sign up

IP Abuse Reports for 71.6.238.116

This IP address has been reported a total of 57 times from 36 distinct sources. 71.6.238.116 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: Turkey with 16 reports; United States of America with 3 reports; Germany with 2 reports. The most common categories in these recent reports were: Web App Attack 19 times; Hacking 19 times; Port Scan 8 times; Brute-Force 5 times; Bad Web Bot 2 times; Other 5 times.

Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฑ๐Ÿ‡น im
BGP CVSPSERVER DCE-RPC DNS FINGER FTP GOPHER H323 HTTP IMAP IMAPS KERBEROS LDAP MMS MS-SQL MYSQL NFS
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ leasj
Observed Scanned 1 known-sensitive endpoint(s), e.g.: /nice+ports,/Trinity.txt.bak.
Hacking Bad Web Bot Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช icera-network.de
Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท security.rdmc.fr
Port Scan Attack proto:TCP src:37161 dst:990
Port Scan
๐Ÿ‡ท๐Ÿ‡บ Albram
Blocked by DNSBL - Mailserver check_relay ...
Brute-Force
Anonymous
Banned by Fail2Ban from jail: suricata
Fraud Orders Port Scan Brute-Force Exploited Host
๐Ÿ‡ง๐Ÿ‡ฌ MazenHost
1790471789 - 09/27/2026 04:16:29 Host: 71.6.238.116/71.6.238.116 Port: 1 TCP Blocked ...
Port Scan
๐Ÿ‡ท๐Ÿ‡ธ Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
๐Ÿ‡บ๐Ÿ‡ธ jfz-abuse
fail2ban: apache-proxy ...
Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช xavier-momain.eu
CrowdSec ban โ€” scenario: ssh:bruteforce
Brute-Force SSH
๐Ÿ‡ฎ๐Ÿ‡ฑ spd.co.il
Port scan detected on multiple ports
Port Scan
๐Ÿ‡ช๐Ÿ‡ช Tsumugi Kotobuki
Port Scan Hacking
๐Ÿ‡จ๐Ÿ‡ฟ lp
anomaly: tcp_src_session, 2501 > threshold 2500, repeats 600 times
Port Scan
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
๐Ÿ‡น๐Ÿ‡ท neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack

Showing 1 to 15 of 57 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown ๐Ÿšฉ

Recently Reported IPs:

๐Ÿ‡บ๐Ÿ‡ธ 170.106.162.17
๐Ÿ‡ฌ๐Ÿ‡ง 154.16.44.5
๐Ÿ‡ต๐Ÿ‡ฐ 39.34.141.70
๐Ÿ‡บ๐Ÿ‡ธ 23.22.243.211
๐Ÿ‡ฐ๐Ÿ‡ท 20.194.27.148
๐Ÿ‡บ๐Ÿ‡ธ 206.189.233.36
๐Ÿ‡จ๐Ÿ‡ณ 180.153.236.22
๐Ÿ‡ญ๐Ÿ‡ฐ 165.154.63.157
๐Ÿ‡จ๐Ÿ‡ฆ 165.22.233.26
๐Ÿ‡ฌ๐Ÿ‡ง 154.16.44.10
๐Ÿ‡บ๐Ÿ‡ธ 129.121.103.53
๐Ÿ‡ง๐Ÿ‡ฉ 103.159.2.113
๐Ÿ‡ณ๐Ÿ‡ฑ 77.67.26.87
๐Ÿ‡บ๐Ÿ‡ธ 50.6.207.165
๐Ÿ‡จ๐Ÿ‡ณ 39.171.42.206
๐Ÿ‡ต๐Ÿ‡ฐ 39.34.218.39
๐Ÿ‡ฎ๐Ÿ‡ณ 4.240.126.25
๐Ÿ‡ฉ๐Ÿ‡ช 213.209.159.236
๐Ÿ‡ฎ๐Ÿ‡น 185.208.104.127