This IP address has been reported a total of
48
times from
30 distinct
sources.
85.121.127.151 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"level":"info","ts":1780740729.6093132,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1780740729.6093132,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"85.121.127.151","remote_port":"48148","client_ip":"85.121.127.151","proto":"HTTP/2.0","method":"GET","host":"meta.updown.io","uri":"/vault.env","headers":{"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"meta.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000118355,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1780740729.630132,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"85.121.127.151","remote_port":"48152","client_ip":"85.121.127.151","proto":"HTTP/2.0","method":"GET","host":"demo.updown.io","uri":"/.aws/credentials","headers":{"User-Agent":["anthropic-ai"],"Accept
...
show less
Detectors: [NGINX] | Reasons: Nginx: Default server trap hit | Automated scan targeting an unauthori ...
show moreDetectors: [NGINX] | Reasons: Nginx: Default server trap hit | Automated scan targeting an unauthorized host or default server sinkhole | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0
show less
http-sensitive-files - IP: 85.121.127.151 - time="2026-06-06T01:49:02+02:00" level=info msg="(555f6 ...
show morehttp-sensitive-files - IP: 85.121.127.151 - time="2026-06-06T01:49:02+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 85.121.127.151 (NL/9009) : 4h ban on Ip 85.121.127.151" module=db
show less
WebApp brute force attack detected. Multiple file scanning attempts from 85.121.127.151. Detected by ...
show moreWebApp brute force attack detected. Multiple file scanning attempts from 85.121.127.151. Detected by fail2ban.
show less