71.6.242.95

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
27% Elevated
32 reports
25 reporters · latest 2 days ago
ISP
Root Evidence, Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS10439
Hostname(s)
rootevidence.com
Domain Name
rootevidence.com
Country
🇺🇸 United States of America
City
San Diego, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
32 from 25 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇫🇷 France 2 🇬🇧 United Kingdom of Great Britain and Northern Ireland 1
Most common categories Port Scan 5 Brute-Force 2 SSH 2 DDoS Attack 1 Hacking 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
Anonymous
71.6.242.95 detected on srv01
Port Scan
🇬🇧 matbargob
CrowdSec crowdsecurity/ssh-bf: 6 events 2026-10-26 23:13:13 - 23:13:14 UTC.
Brute-Force SSH
🇸🇰 GOVCERT
Excessive Firewall Denies
DDoS Attack Web Spam
🇫🇷 security.rdmc.fr
Port Scan Attack proto:TCP src:13779 dst:5900
Port Scan
🇫🇷 Stara
Port scan detected - multiple connection attempts to various ports
Port Scan Brute-Force SSH
Anonymous
denied traffic to a honeypot network. destination port 109.
Port Scan Hacking
🇳🇴 jad-abuse
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: tls_scanner. Observed by 1 sensor(s); 1 hits.
Port Scan Bad Web Bot
🇨🇿 lp
anomaly: tcp_src_session, 2501 > threshold 2500, repeats 16 times
Port Scan
🇯🇵 VXG-NET
port=50800, indicator_type=scan
Port Scan
🇩🇪 filstal.org
Bad bot activity detected (automated scraping/probing).
Bad Web Bot Web App Attack
🇦🇺 Bay13
CrowdSec:custom/modsecurity
Web App Attack
🇧🇷 ICS Labs
ICS Labs identified 71.6.242.95 as a malicious indicator from threat intelligence.
DDoS Attack Hacking Exploited Host
🇸🇰 GOVCERT
Excessive Firewall Denies
DDoS Attack Web Spam
🇨🇿 lp
anomaly: tcp_src_session, 2501 > threshold 2500, repeats 412 times
Port Scan
🇸🇪 SkyDancer
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
Hacking Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 92.118.39.71
🇧🇷 170.84.57.138
🇲🇾 113.211.214.152
🇧🇩 103.61.240.29
🇺🇸 71.59.124.196
🇺🇸 63.135.161.187
🇮🇳 203.190.153.90
🇧🇷 186.225.217.11
🇨🇭 179.43.153.18
🇧🇷 177.161.162.175
🇹🇼 128.1.32.150
🇮🇳 103.176.16.5
🇺🇸 70.184.85.72
🇺🇸 68.225.58.227
🇫🇮 65.21.113.250
🇳🇱 64.205.72.226
🇻🇳 42.112.230.42
🇧🇪 35.210.3.28
🇰🇷 222.113.207.183
🇺🇸 216.25.89.79
feedback