71.6.242.86

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
40% Elevated
40 reports
27 reporters · latest 1 day ago
ISP
Root Evidence, Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS10439
Hostname(s)
rootevidence.com
Domain Name
rootevidence.com
Country
🇺🇸 United States of America
City
San Diego, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
40 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇧🇷 Brazil 1 🇩🇪 Germany 1 🇪🇸 Spain 1
Most common categories Port Scan 6 Bad Web Bot 2 Web App Attack 1 Brute-Force 1 Web Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇳🇴 jad-abuse
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: scanner_ua. Observed by 1 sensor(s); 2 hits.
Bad Web Bot Web App Attack
🇪🇸 Michael McCarthy
Web Spam
🇩🇪 Hazzard
*Port Scan* detected from 71.6.242.86 (US/United States/-/-/rootevidence.com/[redacted]).
Port Scan
Anonymous
Nmap Scripting Engine Scanner Over HTTP Request.
Port Scan
🇯🇵 jsys
Automated report (nfacl NetFlow analysis, 300s window): port scan (702 distinct dst ports); SYN-flood-like small-packet flows (1096 small-packet flows)
DDoS Attack Port Scan
🇮🇪 RoboSOC
SCAN: TCP Port Scan CloudCIX Reconnaissance Scan Detected, PTR: rootevidence.com.
Port Scan
🇫🇷 jonahtebaa
SSH tarpit capture
Port Scan Brute-Force SSH
🇮🇱 spd.co.il
Port scan detected on multiple ports
Port Scan
🇫🇮 as211431.net
Triggered Cloudflare WAF (firewallCustom) from US. Action taken: MANAGED_CHALLENGE Protocol: HTTP/1.1 (GET method) Endpoint: / UA: RootEvidence/1.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇹🇷 neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential VNC Scan 5800-5820
Port Scan
🇹🇷 neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
🇹🇷 neron
CrowdSec blocked: ssh:bruteforce detected via OPNsense firewall
Hacking Web App Attack
🇹🇷 neron
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking Web App Attack
🇹🇷 neron
CrowdSec blocked: tcp:scan detected via OPNsense firewall
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇷 168.205.190.245
🇳🇱 144.124.249.20
🇺🇸 137.184.53.60
🇨🇳 120.48.14.39
🇵🇭 112.207.180.43
🇺🇸 104.28.233.73
🇺🇸 45.13.212.206
🇬🇧 35.203.211.9
🇷🇴 2.57.121.112
🇺🇸 142.251.153.120
🇺🇸 130.49.113.194
🇹🇼 123.58.196.28
🇨🇳 112.37.152.162
🇺🇸 104.28.201.73
🇧🇷 92.112.175.74
🇫🇷 91.196.152.10
feedback