209.94.61.130
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- UpCloud USA Inc / San Jose
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS25697
- Hostname(s)
- 209-94-61-130.us-sjo1.upcloud.host
- Domain Name
- upcloud.host
- Country
- ๐บ๐ธ United States of America
- City
- San Jose, California
Abuse Reports
Total reports
29 from
27 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
. It is possible that this IP is
no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| ๐ณ๐ฑ homeshowdomain.nl |
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-14.
|
Web App Attack SSH Hacking | |
| ๐ง๐ท ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force. Last observed 2026-10-14 UTC.
|
Hacking Brute-Force | |
| ๐ฉ๐ช DyhnenTv |
CrowdSec webserver: crowdsecurity/http-sensitive-files
|
Web App Attack Bad Web Bot | |
| ๐ฉ๐ช ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| ๐ฉ๐ช yitzhaq |
|
Web App Attack Hacking | |
| ๐น๐ผ kk_it_man |
hack
|
Hacking | |
| ๐ฉ๐ช raph |
[DOT FILES] crawler *.env*, .git*, .config*, etc.
|
Bad Web Bot Web App Attack | |
| ๐ซ๐ท chengkev |
Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-sensitive-files
|
Web App Attack Hacking | |
| Anonymous |
|
Hacking Web App Attack | |
| ๐บ๐ธ H24 |
/apps/.env /app/.env /blog/.env /vendor/.env /app/config/.env /laravel/.env /api/.env /crm/.env /local/.env /old/.env
|
Web App Attack | |
| ๐ฆ๐น Erpelstolz |
fail2ban on bvseq; jail=cobi-wp
|
Web App Attack | |
| ๐ซ๐ท Kejult |
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 11 application-level events across 11 source port(s). Sensor(s): H0neytr4p.
|
Port Scan | |
| ๐ง๐ช cmbplf |
1.318 requests with url.path *.env
|
Brute-Force Bad Web Bot | |
| ๐ฉ๐ช EGP Abuse Dept |
Scanning for web/db/file exploits on www.evenementenkleding.nl
|
SQL Injection Bad Web Bot Web App Attack | |
| ๐ฒ๐พ Rizzy |
Multiple WAF Violations
|
Brute-Force Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown