71.6.242.174

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
31% Elevated
34 reports
24 reporters · latest 3 days ago
ISP
Root Evidence, Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS10439
Hostname(s)
rootevidence.com
Domain Name
rootevidence.com
Country
🇺🇸 United States of America
City
Los Angeles, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
34 from 24 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 1 🇮🇪 Ireland 1 🇮🇱 Israel 1
Most common categories Web App Attack 3 Bad Web Bot 2 Brute-Force 2 SSH 1 Port Scan 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇪 AutosOnShow
blocked for webapp attack | path requested: /wls-wsat/CoordinatorPortType | seen at 2026-11-11 05:22:28.335 |
Web App Attack
🇳🇱 Savvii
20 attempts against mh-misbehave-ban on redirect
Brute-Force Bad Web Bot Web App Attack
🇮🇱 spd.co.il
Port scan detected on multiple ports
Port Scan
🇸🇪 SkyDancer
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface.
Hacking Brute-Force SSH
Anonymous
71.6.242.174 - - [25/Oct/2026:04:37:32 +0000] "\x16\x03\x01\x06\t\x01" 400 432 "-" "-" ...
Bad Web Bot Web App Attack
🇬🇧 openstrike.co.uk
Port Scan
🇸🇰 GOVCERT
Excessive Firewall Denies
DDoS Attack Web Spam
🇮🇪 RoboSOC
SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: rootevidence.com.
Port Scan
Anonymous
external scanner
Port Scan
Anonymous
$f2bV_matches
Brute-Force SSH
🇧🇷 ICS Labs
ICS Labs identified 71.6.242.174 as a malicious indicator from threat intelligence.
DDoS Attack Hacking Exploited Host
🇺🇸 gu-alvareza
Nmap.Script.Scanner
Port Scan
🇩🇪 30p87
2026-07-09T04:25:14.133911+02:00 30p87-server sshd-session[2014154]: Connection closed by 71.6.242.174 port 43560 [preauth] ...
Brute-Force SSH
🇨🇿 lp
anomaly: tcp_src_session, 2501 > threshold 2500, repeats 168 times
Port Scan
🇮🇱 spd.co.il
Port scan detected on multiple ports
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 177.112.215.133
🇳🇱 77.239.124.38
🇹🇼 61.220.94.159
🇨🇳 60.26.3.107
🇳🇱 45.148.10.152
🇸🇬 43.106.91.141
🇧🇪 35.210.123.92
🇭🇰 223.197.186.7
🇳🇱 200.138.46.169
🇲🇺 197.225.53.167
🇺🇦 193.107.114.120
🇦🇷 148.227.74.227
🇺🇸 147.185.132.152
🇹🇳 102.29.54.95
🇧🇬 78.128.113.46
🇫🇷 51.83.6.4
🇫🇷 45.80.27.169
🇧🇷 45.70.254.197
🇬🇧 195.206.182.217
🇺🇸 152.163.101.215
feedback