๐ณ๐ฑ
Savvii
2026-10-27 22:04:38
(2 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
Inartis
2026-10-27 19:59:52
(4 hours ago)
206.81.24.74 - - [27/Oct/2026:20:59:51 +0100] "GET /server HTTP/1.1" 404 360 "-" "Mozilla/5.0 (l9sca ...
show more
206.81.24.74 - - [27/Oct/2026:20:59:51 +0100] "GET /server HTTP/1.1" 404 360 "-" "Mozilla/5.0 (l9scan/2.0.936313e2734323e29333e23393; +https://leakix.net)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-27 19:29:29
(4 hours ago)
[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 206.81.24.74 - - [27/Oct/2026:20:29:15 +0100] "GET /.env HTTP/1.1" 200 1173 "-" "Mozilla/5.0 (l9scan/2.0.533323e2131323e2434313e2633313; +https://leakix.net)"
...
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-27 18:18:24
(6 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: admin.astropot.store | URI: /.env | UA: Mozilla/5.0 (l9scan/2.0.932313e2733313e27363e2237313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"206.81.24.74","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a513b3fc6dc416f0-FRA","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.81.24.74"}
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-10-27 16:49:51
(7 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฉ๐ช
VonderWulf
2026-10-27 16:37:55
(7 hours ago)
Observed GET /.env on TCP/443 at 2026-10-26T01:30:57+01:00; WAF returned HTTP 403 and Fail2Ban banne ...
show more
Observed GET /.env on TCP/443 at 2026-10-26T01:30:57+01:00; WAF returned HTTP 403 and Fail2Ban banned this source. Correlated 1 audit transaction(s) to the source address.
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-10-27 15:19:14
(9 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: prometheus.teddypot.site | URI: /.env | UA: Mozilla/5.0 (l9scan/2.0.738313e23343e21323e2430313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"206.81.24.74","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a512ad8b9d124e6c-FRA","Connection":"Keep-Alive","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.81.24.74"}
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-27 13:02:45
(11 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ง๐ฌ
HighWay
2026-10-27 12:48:16
(11 hours ago)
206.81.24.74 - - [27/Oct/2026:12:47:46 +0000] "GET /console/ HTTP/1.1" 404 5940 "-" "Mozilla/5.0 (l9 ...
show more
206.81.24.74 - - [27/Oct/2026:12:47:46 +0000] "GET /console/ HTTP/1.1" 404 5940 "-" "Mozilla/5.0 (l9scan/2.0.2313e27393e2431313e2838313; +https://leakix.net)"
206.81.24.74 - - [27/Oct/2026:12:47:47 +0000] "GET /server HTTP/1.1" 404 5940 "-" "Mozilla/5.0 (l9scan/2.0.2313e27393e2431313e2838313; +https://leakix.net)"
206.81.24.74 - - [27/Oct/2026:12:47:50 +0000] "GET /about HTTP/1.1" 404 770 "-" "Mozilla/5.0 (l9scan/2.0.2313e27393e2431313e2838313; +https://leakix.net)"
206.81.24.74 - - [27/Oct/2026:12:47:51 +0000] "GET /login.action HTTP/1.1" 404 5940 "-" "Mozilla/5.0 (l9scan/2.0.2313e27393e2431313e2838313; +https://leakix.net)"
206.81.24.74 - - [27/Oct/2026:12:47:52 +0000] "GET /___proxy_subdomain_whm/login HTTP/1.1" 404 5939 "-" "Mozilla/5.0 (l9scan/2.0.2313e27393e2431313e2838313; +https://leakix.net)"
206.81.24.74 - - [27/Oct/2026:12:47:52 +0000] "GET /___proxy_subdomain_cpanel HTTP/1.1" 404 5941 "-" "Mozilla/5.0 (l9scan/2.0.2313e27393e2431313e2838313; +https://leakix.net)"
206.81.24.7
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-27 11:16:29
(13 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฎ๐น
Inartis
2026-10-27 11:14:25
(13 hours ago)
206.81.24.74 - - [27/Oct/2026:12:14:23 +0100] "GET /server HTTP/1.1" 404 79151 "-" "Mozilla/5.0 (l9s ...
show more
206.81.24.74 - - [27/Oct/2026:12:14:23 +0100] "GET /server HTTP/1.1" 404 79151 "-" "Mozilla/5.0 (l9scan/2.0.936313e2734323e29333e23393; +https://leakix.net)"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-27 09:25:19
(14 hours ago)
FortiWeb WAF: 206 attacks detected. Threat Score: 6000. Types: Client Management(103), Known Bots De ...
show more
FortiWeb WAF: 206 attacks detected. Threat Score: 6000. Types: Client Management(103), Known Bots Detection(90), HTTP Protocol Constraints(13). Origin: Germany.
show less
Bad Web Bot
๐ต๐ฑ
Budyn
2026-10-27 09:13:44
(15 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: jenkins.teddypot.website | URI: /.env | UA: Mozilla/5.0 (l9scan/2.0.33e27393e2431313e2838313; +https://leakix.net) | BODY: [Empty / GET Request] | HEADERS: {"Connection":"Keep-Alive","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"206.81.24.74","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a5109626edd2d233-FRA","Accept-Encoding":"gzip, br","X-Forwarded-For":"206.81.24.74"}
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-27 04:15:21
(20 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
Quarks Solutions
2026-10-27 03:54:10
(20 hours ago)
crowdsecurity/jira_cve-2021-26086
Web App Attack
Hacking