Verified Bots Directory

Directory / Security scanners

LeakIX (l9explore)

Verifiable

LeakIX's internet-wide recon scanner (l9explore), which probes exposed services to populate the LeakIX misconfiguration/vulnerability search engine. Its probe fleet publishes a live, per-host list of source IPs at scan.leakix.net whose hostnames resolve under scan.leakix.org, and its scanning tool sets an identifiable user-agent.

Operated by LeakIX · Official documentation

User agents

Patterns this directory matches, with real observed strings.

  • regexl9explore/[\d.]+
  • observedl9explore/1.2.2

How to verify

Reverse-DNS check a client IP

dig -x <client-ip> +short   # expect a hostname matching *.scan.leakix.org

Reverse-DNS suffixes: *.scan.leakix.org

Good Bot Practices scorecard

  • Identifies honestly

    Stable UA token documented (1 pattern)

  • Verifiable

    Verifiable

  • Respects robots.txt

    Does not honor robots.txt

  • Behaves

    Crawl-rate behavior is operator-declared; not machine-verifiable from this dataset

  • Reachable operator

    Operator and documentation published

Measured against the Good Bot Practices.