209.94.61.130

Activity Trending Down This IP hasn't received reports recently, which causes the score to decay.
Abuse Confidence Score
96% Critical
29 reports
27 reporters ยท latest 1 week ago
ISP
UpCloud USA Inc / San Jose
Usage Type
Data Center/Web Hosting/Transit
ASN
AS25697
Hostname(s)
209-94-61-130.us-sjo1.upcloud.host
Domain Name
upcloud.host
Country
๐Ÿ‡บ๐Ÿ‡ธ United States of America
City
San Jose, California
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
29 from 27 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ณ๐Ÿ‡ฑ Netherlands 7 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 6 ๐Ÿ‡ซ๐Ÿ‡ท France 4
Most common categories Web App Attack 25 Brute-Force 12 Bad Web Bot 11 Hacking 9 SSH 2
Old reports The most recent abuse report for this IP address is from . It is possible that this IP is no longer involved in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ณ๐Ÿ‡ฑ homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-14.
Web App Attack SSH Hacking
๐Ÿ‡ง๐Ÿ‡ท ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking, Brute-Force. Last observed 2026-10-14 UTC.
Hacking Brute-Force
๐Ÿ‡ฉ๐Ÿ‡ช DyhnenTv
CrowdSec webserver: crowdsecurity/http-sensitive-files
Web App Attack Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช ghostwarriors
Attempts against non-existent wp-login
Brute-Force Web App Attack
๐Ÿ‡ฉ๐Ÿ‡ช yitzhaq
Web App Attack Hacking
๐Ÿ‡น๐Ÿ‡ผ kk_it_man
hack
Hacking
๐Ÿ‡ฉ๐Ÿ‡ช raph
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท chengkev
Esta IP fue detectada por CrowdSec, activando crowdsecurity/http-sensitive-files
Web App Attack Hacking
Anonymous
Hacking Web App Attack
๐Ÿ‡บ๐Ÿ‡ธ H24
/apps/.env /app/.env /blog/.env /vendor/.env /app/config/.env /laravel/.env /api/.env /crm/.env /local/.env /old/.env
Web App Attack
๐Ÿ‡ฆ๐Ÿ‡น Erpelstolz
fail2ban on bvseq; jail=cobi-wp
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 11 application-level events across 11 source port(s). Sensor(s): H0neytr4p.
Port Scan
๐Ÿ‡ง๐Ÿ‡ช cmbplf
1.318 requests with url.path *.env
Brute-Force Bad Web Bot
๐Ÿ‡ฉ๐Ÿ‡ช EGP Abuse Dept
Scanning for web/db/file exploits on www.evenementenkleding.nl
SQL Injection Bad Web Bot Web App Attack
๐Ÿ‡ฒ๐Ÿ‡พ Rizzy
Multiple WAF Violations
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ท 201.74.172.84
๐Ÿ‡บ๐Ÿ‡ธ 129.121.141.21
๐Ÿ‡บ๐Ÿ‡ธ 128.2.204.55
๐Ÿ‡ณ๐Ÿ‡ฑ 81.171.74.60
๐Ÿ‡ฉ๐Ÿ‡ช 51.195.40.26
๐Ÿ‡จ๐Ÿ‡ณ 8.134.157.132
๐Ÿ‡น๐Ÿ‡ผ 198.235.24.18
๐Ÿ‡ฒ๐Ÿ‡ฝ 189.146.113.120
๐Ÿ‡บ๐Ÿ‡ธ 45.49.49.9
๐Ÿ‡ฎ๐Ÿ‡ฉ 43.230.5.42
๐Ÿ‡บ๐Ÿ‡ธ 209.141.46.191
๐Ÿ‡ง๐Ÿ‡ท 177.98.69.77
๐Ÿ‡บ๐Ÿ‡ธ 157.254.221.222
๐Ÿ‡จ๐Ÿ‡ฆ 147.182.150.224
๐Ÿ‡ณ๐Ÿ‡ฑ 128.90.161.9
๐Ÿ‡จ๐Ÿ‡ณ 121.227.31.13
๐Ÿ‡บ๐Ÿ‡ธ 103.146.52.157
๐Ÿ‡ฎ๐Ÿ‡ท 85.133.132.47
๐Ÿ‡บ๐Ÿ‡ธ 66.132.159.32
๐Ÿ‡จ๐Ÿ‡ณ 58.20.236.52