AbuseIPDB » 71.6.238.75
71.6.238.75 was found in our database!
This IP was reported 21 times. Confidence of Abuse is 29%: ?
| ISP | Root Evidence, Inc |
|---|---|
| Usage Type | Data Center/Web Hosting/Transit |
| ASN | AS10439 |
| Hostname(s) |
rootevidence.com |
| Domain Name | rootevidence.com |
| Country | 🇺🇸 United States of America |
| City | San Diego, California |
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
IP Abuse Reports for 71.6.238.75:
This IP address has been reported a total of 21 times from 16 distinct sources. 71.6.238.75 was first reported on , and the most recent report was .
Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| Anonymous |
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan, ET SCAN Potential VNC Scan 5800-5820
|
Port Scan | ||
| 🇸🇰 GOVCERT |
Excessive Firewall Denies
|
DDoS Attack Web Spam | ||
| 🇺🇸 Starburst SysOp Team |
Request Missing a Host Header. Operator EQ matched 0 at REQUEST_HEADERS. (920280-mnz6-5)
|
Hacking | ||
| 🇧🇷 ICS Labs |
ICS Labs identified 71.6.238.75 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Exploited Host | ||
| 🇮🇪 RoboSOC |
SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: rootevidence.com.
|
Port Scan | ||
| 🇸🇰 GOVCERT |
Excessive Firewall Denies
|
DDoS Attack Web Spam | ||
| 🇬🇧 consul.to |
Web attack/malicious scanning detected
|
Web App Attack | ||
| 🇮🇪 RoboSOC |
SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: rootevidence.com.
|
Port Scan | ||
| 🇩🇪 iNetWorker |
trolling for resource vulnerabilities
|
Web App Attack | ||
| 🇨🇿 Countryman |
repeated unauthorized connection attempts, host sweep, port scan
|
Port Scan | ||
| 🇧🇷 ICS Labs |
ICS Labs identified 71.6.238.75 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Exploited Host | ||
| 🇨🇿 sajmon0011 |
71.6.238.75 - - [13/May/2026:07:22:06 +0200] "\x16\x03\x01\x05\xdf\x01" 400 226 "-" "-"
...
|
Web App Attack | ||
| 🇮🇪 RoboSOC |
SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: rootevidence.com.
|
Port Scan | ||
| 🇯🇵 VXG-NET |
port=9500, indicator_type=scan
|
Port Scan | ||
| 🇩🇪 psauxit |
Fail2Ban - UFW port probing on unauthorized port
|
Port Scan |
Showing 1 to 15 of 21 reports
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩