🇵🇱
Budyn
2026-10-27 18:18:25
(3 minutes ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.definitelynotahoneypot.xyz | URI: /.env | UA: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"138.68.86.32","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a513b4052d62d269-FRA","Accept-Encoding":"gzip, br","X-Forwarded-For":"138.68.86.32"}
show less
Bad Web Bot
Web App Attack
🇺🇸
alecj.com
2026-10-27 17:33:09
(49 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-10-27 16:45:03
(1 hour ago)
crowdsecurity/jira_cve-2021-26086
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-27 15:18:21
(3 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.astropot.online | URI: /v2/_catalog | UA: Mozilla/5.0 (l9scan/2.0.335323e21323e21323e2430313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"138.68.86.32","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a512ac415ab33c30-FRA","Connection":"Keep-Alive","Accept":"application\/json","Accept-Encoding":"gzip, br","X-Forwarded-For":"138.68.86.32"}
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-27 14:43:28
(3 hours ago)
[ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-09al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 138.68.86.32 - - [27/Oct/2026:15:43:17 +0100] "GET /.env HTTP/1.1" 301 782 "-" "Mozilla/5.0 (l9scan/2.0.036313e2733323e2434313e2633313; +https://leakix.net)"
...
show less
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-10-27 13:53:06
(4 hours ago)
138.68.86.32 - - [27/Oct/2026:15:53:05 +0200] "GET /server-status HTTP/2.0" 403 0 "-" "Mozilla/5.0 ( ...
show more
138.68.86.32 - - [27/Oct/2026:15:53:05 +0200] "GET /server-status HTTP/2.0" 403 0 "-" "Mozilla/5.0 (l9scan/2.0.933313e2034313e27363e2237313; +https://leakix.net)"
...
show less
Web App Attack
🇳🇦
jacqueskruger
2026-10-27 11:05:54
(7 hours ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed aler ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-10-27T11:04:36Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
2026-10-27 10:27:59
(7 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇵🇱
Budyn
2026-10-27 09:21:55
(9 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: status.teddypot.cloud | URI: /v2/_catalog | UA: Mozilla/5.0 (l9scan/2.0.4393e2937313e27363e2237313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"138.68.86.32","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a510a2200e47dcf5-FRA","Connection":"Keep-Alive","Accept":"application\/json","Accept-Encoding":"gzip, br","X-Forwarded-For":"138.68.86.32"}
show less
Bad Web Bot
Web App Attack
🇪🇸
beats
2026-10-27 09:08:46
(9 hours ago)
Reported by CrowdSec
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-27 06:15:56
(12 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.goblinpot.website | URI: /.env | UA: Mozilla/5.0 (l9scan/2.0.5383e2834313e27363e2237313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"138.68.86.32","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50f91b11d27d2da-FRA","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"138.68.86.32"}
show less
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-10-27 02:03:08
(16 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-27 01:10:13
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
matbargob
2026-10-26 23:36:16
(18 hours ago)
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:16 - 23:36:22 UTC. Method: GET. Pat ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-10-26 23:36:16 - 23:36:22 UTC. Method: GET. Paths: /, /console/, /server, /server-status, /about, /login.action. Status: 404. UA: Mozilla/5.0 (l9scan/2.0.934323e21333e28363e27373; +https://leakix.net)
show less
Web App Attack
2026-10-26 23:19:18
(19 hours ago)
Web application attack: jira cve 2021 26086; Microsoft Exchange OWA/ECP/Autodiscover probe; Probing ...
show more
Web application attack: jira cve 2021 26086; Microsoft Exchange OWA/ECP/Autodiscover probe; Probing for exposed secret / credential files
show less
Hacking
Web App Attack