🇵🇱
Budyn
2026-10-27 12:20:08
(2 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.definitelynotahoneypot.top | URI: /.git/config | UA: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"206.189.19.19","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a511a72eee596546-LHR","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.189.19.19"}
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-27 09:14:58
(5 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: pma.budyn.ovh | URI: /.git/config | UA: Mozilla/5.0 (l9scan/2.0.4393e2137313e27363e2237313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"206.189.19.19","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a51097f43d9e0033-LHR","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.189.19.19"}
show less
Bad Web Bot
Web App Attack
🇪🇸
beats
2026-10-27 09:08:28
(5 hours ago)
Reported by CrowdSec
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
JGouin
2026-10-27 07:39:35
(7 hours ago)
206.189.19.19 [27/Oct/2026:03:39:35 -0400] "GET /.env HTTP/1.1" 403 tarpit_triggered
...
Web App Attack
🇵🇱
Budyn
2026-10-27 06:19:12
(8 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cluster.teddypot.website | URI: /.git/config | UA: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"206.189.19.19","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50f96777987af90-LHR","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.189.19.19"}
show less
Bad Web Bot
Web App Attack
🇬🇧
myintarweb
2026-10-27 05:17:20
(9 hours ago)
206.189.19.19 - - [27/Oct/2026:05:17:19 +0000] 443 "GET /login.action HTTP/1.1" 403 2061 "-" "Mozill ...
show more
206.189.19.19 - - [27/Oct/2026:05:17:19 +0000] 443 "GET /login.action HTTP/1.1" 403 2061 "-" "Mozilla/5.0 (l9scan/2.0.7353e2333323e2135313e23383; +https://leakix.net)"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-27 04:05:40
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-10-27 03:16:06
(11 hours ago)
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 206.189.19.19 - - [27/Oct/2026:04:15:58 +0100] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (l9scan/2.0.530313e26333e2934323e2337313; +https://leakix.net)"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-27 03:13:58
(11 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.teddypot.online | URI: /.env | UA: Mozilla/5.0 (l9scan/2.0.7313e26343e21323e2430313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"GB","Cf-Connecting-Ip":"206.189.19.19","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a50e8721fed2cd1a-LHR","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.189.19.19"}
show less
Bad Web Bot
Web App Attack
🇻🇮
Axel
2026-10-27 01:24:35
(13 hours ago)
WAF/ModSecurity blocked 32 malicious request(s) (HTTP 403) from this IP. Activity: Vulnerability sca ...
show more
WAF/ModSecurity blocked 32 malicious request(s) (HTTP 403) from this IP. Activity: Vulnerability scanner detected x32. Latest: 2026-10-27T01:24:35Z.
show less
Hacking
Brute-Force
Web App Attack
🇩🇪
Tsumugi Kotobuki
2026-10-27 00:21:19
(14 hours ago)
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 55 | Len: 60B ...
show more
Port Scan on Honeypot | Ports: 8443/HTTPS-alt | Proto: TCP(1) | Flags: all SYN | TTL: 55 | Len: 60B | Win: 64240(1) | rDNS: b37662257c.scan.leakix.org | F2B/ufw-honeypot@2026-10-27T00:21:19Z
show less
Port Scan
Hacking
2026-10-27 00:01:19
(15 hours ago)
Microsoft Exchange OWA/ECP/Autodiscover probe; Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
abuse-opdc
2026-10-26 23:26:01
(15 hours ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
🇷🇴
iulianh
2026-10-26 22:51:15
(16 hours ago)
80,443
Brute-Force
SSH
🇸🇪
vaia.cloud
2026-10-26 22:45:02
(16 hours ago)
crowdsecurity/jira_cve-2021-26086
Brute-Force
Web App Attack