71.6.242.154

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
26% Elevated
31 reports
24 reporters · latest 6 days ago
ISP
Root Evidence, Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS10439
Hostname(s)
rootevidence.com
Domain Name
rootevidence.com
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
31 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇯🇵 Japan 2 🇮🇪 Ireland 1
Most common categories Port Scan 4 Brute-Force 1 SSH 1 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
denied traffic to a honeypot network. destination port 8090.
Port Scan Hacking
🇩🇪 Tom Langer
2026-10-30T07:51:48.607725+00:00 ubuntu sshd[171468]: Invalid user [email protected] from 71.6.242.154 port 8660 2026-10-30T07:51:50.287755+00:00 ubuntu sshd[171474]: Invalid user [email protected] from 71.6.242.154 port 8684 ...
Brute-Force SSH
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): port scan (75 distinct dst ports)
Port Scan
🇯🇵 VXG-NET
port=16993, indicator_type=scan
Port Scan
🇮🇪 RoboSOC
SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: rootevidence.com.
Port Scan
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
Anonymous
71.6.242.154 - - [03/Sep/2026:08:15:56 +0000] "\x16\x03\x01\x05\xf6\x01" 400 432 "-" "-" ...
Bad Web Bot Web App Attack
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan, ET SCAN Potential VNC Scan 5800-5820
Port Scan
🇦🇹 centurion
Unauthorized attempt on siem [1862/tcp] Source port: 33711 TTL: 41 Packet length: 44 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇨🇿 lp
anomaly: tcp_src_session, 2501 > threshold 2500, repeats 278 times
Port Scan
🇺🇸 gu-alvareza
Nmap.Script.Scanner
Port Scan
Anonymous
Aggressive web scan
Web App Attack
🇩🇪 Petros Stefanakis
(bind) bind triggered by 71.6.242.154 (US/United States/rootevidence.com)
Hacking
🇷🇸 Scan
MultiHost/MultiPort Probe, Scan, Hack -
Port Scan Hacking
🇳🇱 Roderic
*Port Scan* detected from 71.6.242.154 (US/United States/-/-/rootevidence.com/[redacted]).
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇦 194.44.90.105
🇬🇧 188.240.59.24
🇳🇱 77.239.124.44
🇺🇸 68.183.107.241
🇫🇷 213.136.81.100
🇸🇬 212.73.148.47
🇺🇦 194.44.57.62
🇺🇦 194.44.56.145
🇨🇴 190.146.183.13
🇺🇸 172.56.144.30
🇰🇿 104.22.166.147
🇨🇳 59.63.166.218
🇧🇪 35.210.237.62
🇧🇪 35.206.185.160
🇺🇦 194.39.227.127
🇺🇦 193.194.108.75
🇬🇧 188.240.59.25
🇫🇷 185.177.72.9
🇺🇸 172.59.211.109
🇹🇭 125.26.202.160
feedback