JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 71.6.238.194

71.6.238.194 was found in our database!

This IP was reported 17 times. Confidence of Abuse is 43%: ?

43%

ISP	Root Evidence, Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS10439
Hostname(s)	rootevidence.com
Domain Name	rootevidence.com
Country	🇺🇸 United States of America
City	San Diego, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 71.6.238.194

Whois 71.6.238.194

IP Abuse Reports for 71.6.238.194:

This IP address has been reported a total of 17 times from 17 distinct sources. 71.6.238.194 was first reported on March 26th 2026, and the most recent report was 7 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 jhuisi	2026-06-26 04:02:46 (7 hours ago)	Mod Security Hit	Web App Attack
🇧🇪 cmbplf	2026-06-26 03:46:18 (7 hours ago)	27 requests with url.path *.dll	Brute-Force Bad Web Bot
🇩🇪 moretrix	2026-06-24 06:45:29 (2 days ago)	2026-06-24T08:45:27.757570+02:00 ieyasu.moretrix.com named[1779]: client @0x7f6856287c00 71.6.238.19 ... show more 2026-06-24T08:45:27.757570+02:00 ieyasu.moretrix.com named[1779]: client @0x7f6856287c00 71.6.238.194#34303 (202.194.247.80.in-AddR.aRPa): view external: query (cache) '202.194.247.80.in-AddR.aRPa/PTR/IN' denied (allow-query-cache did not match) 2026-06-24T08:45:28.756885+02:00 ieyasu.moretrix.com named[1779]: client @0x7f685bae4800 71.6.238.194#50151 (202.194.247.80.in-addr.arpa): view external: query (cache) '202.194.247.80.in-addr.arpa/PTR/IN' denied (allow-query-cache did not match) 2026-06-24T08:45:29.089489+02:00 ieyasu.moretrix.com named[1779]: client @0x7f6846ccfc00 71.6.238.194#36976 (202.194.247.80.in-addr.arpa): view external: query (cache) '202.194.247.80.in-addr.arpa/PTR/IN' denied (allow-query-cache did not match) ... show less	Brute-Force
🇬🇧 consul.to	2026-06-13 03:56:27 (1 week ago)	Web attack/malicious scanning detected	Web App Attack
🇸🇰 GOVCERT	2026-06-11 17:51:28 (2 weeks ago)	Excessive Firewall Denies	DDoS Attack Web Spam
🇯🇵 VXG-NET	2026-05-30 18:15:57 (3 weeks ago)	port=7938, indicator_type=scan	Port Scan
🇧🇷 ICS Labs	2026-05-14 11:59:53 (1 month ago)	ICS Labs identified 71.6.238.194 as a malicious indicator from threat intelligence.	Hacking
🇫🇮 ngonghillsbikers	2026-05-10 05:00:09 (1 month ago)	Date: 10/May/2026:07:57:37.570286 +0300 \| Reported IP: 71.6.238.194 mod_security \| id: 950130 959100 ... show more Date: 10/May/2026:07:57:37.570286 +0300 \| Reported IP: 71.6.238.194 mod_security \| id: 950130 959100 980170 \| US/group.my_domain/- \| Connections: 1 \| Blocked: Permanent Block: [LF_MODSEC] \| Logs: ; ; ; ; ; ; ; Warning. Pattern match; Warning. Pattern match; Warning. Unconditional match in SecAction. [file; Warning. Unconditional match in SecAction. [file; Access denied with code 403 (phase 4). Operator GE matched 4 at TX:blocking_outbound_anomaly_score. [file; Access denied with code 403 (phase 4). Operator GE matched 4 at TX:blocking_outbound_anomaly_score. [file show less	SQL Injection Brute-Force Bad Web Bot
🇧🇬 Stoyko Stoykov	2026-05-09 04:18:58 (1 month ago)	71.6.238.194 - - [09/May/2026:07:18:58 +0300] "\x16\x03\x01\x05\xE2\x01\x00\x05\xDE\x03\x03#\xE2\xDC ... show more 71.6.238.194 - - [09/May/2026:07:18:58 +0300] "\x16\x03\x01\x05\xE2\x01\x00\x05\xDE\x03\x03#\xE2\xDC\xEE\xD0>\x22f\x0F\xC3\xDB\xC7\xA4sH{\x8D\x97\xC2m\x07P\xA3\xE5{\xD1=.\xF2Y=\x99 1\xE6\x17\xAFF\x02\xCF>7G\x19\x0B\x05\xE0\xA6\xD7\x07\x89Q1\xF8\xEAY\xAFb\x9C\xC2\xF10\xF3" 400 150 "-" "-" ... show less	Hacking Web App Attack
🇹🇼 taiwanfrp.me	2026-05-05 14:15:09 (1 month ago)	taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=2, targets10m=2, targ ... show more taiwanfrp NewUserConn auto-ban: reason=ip_over_target_scan_limit_60s1, conn10s=2, targets10m=2, target=proxy:kiwicanary.MinecraftJavapvm\|port:- show less	Port Scan Hacking
🇩🇪 rev-crew.info	2026-04-30 07:37:24 (1 month ago)	2026-04-30T09:37:21.376592+02:00 rev-crew.info postfix/submission/smtpd[945863]: improper command pi ... show more 2026-04-30T09:37:21.376592+02:00 rev-crew.info postfix/submission/smtpd[945863]: improper command pipelining after CONNECT from unknown[71.6.238.194]: EHLO\r\n 2026-04-30T09:37:21.699194+02:00 rev-crew.info postfix/submission/smtpd[945863]: improper command pipelining after CONNECT from unknown[71.6.238.194]: HELP\r\n 2026-04-30T09:37:22.051387+02:00 rev-crew.info postfix/submission/smtpd[945863]: improper command pipelining after CONNECT from unknown[71.6.238.194]: GET / HTTP/1.0\r\n\r\n 2026-04-30T09:37:23.872147+02:00 rev-crew.info postfix/smtpd[945862]: improper command pipelining after CONNECT from unknown[71.6.238.194]: HELP\r\n 2026-04-30T09:37:24.199669+02:00 rev-crew.info postfix/smtpd[945862]: improper command pipelining after CONNECT from unknown[71.6.238.194]: \r\n\r\n ... show less	Email Spam Brute-Force
🇩🇪 Petros Stefanakis	2026-04-21 22:33:26 (2 months ago)	(bind) bind triggered by 71.6.238.194 (US/United States/rootevidence.com)	Hacking
🇺🇸 Hobby Bob	2026-04-16 09:50:24 (2 months ago)	Apr 16 11:50:24 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 s ... show more Apr 16 11:50:24 server dovecot: pop3-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=, rip=71.6.238.194, lip=X.X.X.X session= show less	Port Scan Hacking
🇺🇸 gu-alvareza	2026-04-15 07:07:10 (2 months ago)	Nmap.Script.Scanner	Port Scan
🇹🇷 rtbh.com.tr	2026-03-27 20:12:17 (2 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 17 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 52.20.198.190

🇺🇸 154.26.184.99

🇮🇳 139.59.56.104

🇨🇦 104.36.149.175

🇵🇰 72.255.18.141

🇺🇸 66.132.195.29

🇳🇱 195.178.110.162

🇺🇸 173.239.211.249

🇺🇸 162.216.149.144

🇺🇸 66.132.172.223

🇧🇷 45.205.1.244

🇩🇪 45.129.242.233

🇨🇿 217.31.61.57

🇮🇹 172.213.2.229

🇺🇸 152.32.207.197

🇮🇳 122.183.53.155

🇭🇰 118.193.37.50

🇺🇸 103.143.11.150

🇺🇸 57.141.0.9

🇳🇱 45.148.10.157