🇵🇱
Budyn
2026-11-07 18:46:55
UTC ·
(2 hours ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_3 | Action: AWS API Call | Token ID: 4tpvosl7k2etr0dcza06lsb9g | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1. ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_3 | Action: AWS API Call | Token ID: 4tpvosl7k2etr0dcza06lsb9g | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 16:08:18
UTC ·
(5 hours ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_8 | Action: AWS API Call | Token ID: 95b23kxelv1qyzc6evkizbyhn | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1. ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_8 | Action: AWS API Call | Token ID: 95b23kxelv1qyzc6evkizbyhn | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 13:57:43
UTC ·
(7 hours ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_10 | Action: AWS API Call | Token ID: 53hmvky4jw5pgwl8xxid8p06l | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1 ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_10 | Action: AWS API Call | Token ID: 53hmvky4jw5pgwl8xxid8p06l | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 11:54:43
UTC ·
(9 hours ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_2 | Action: AWS API Call | Token ID: tu8jkpvo92f821qykacxbbvok | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1. ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_2 | Action: AWS API Call | Token ID: tu8jkpvo92f821qykacxbbvok | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 09:45:29
UTC ·
(12 hours ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_9 | Action: AWS API Call | Token ID: nk9br2dhw9iulptrg3dmcbkxl | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1. ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_9 | Action: AWS API Call | Token ID: nk9br2dhw9iulptrg3dmcbkxl | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-07 05:55:17
UTC ·
(15 hours ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_12 | Action: AWS API Call | Token ID: akf9s74n5eldbzbpzbzf5lt45 | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1 ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_12 | Action: AWS API Call | Token ID: akf9s74n5eldbzbpzbzf5lt45 | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 09:36:44
UTC ·
(1 day ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_7 | Action: AWS API Call | Token ID: 4dvmm7wgh55qaj86jjj1vqe1z | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1. ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_7 | Action: AWS API Call | Token ID: 4dvmm7wgh55qaj86jjj1vqe1z | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 07:15:20
UTC ·
(1 day ago)
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_2 | Action: AWS API Call | Token ID: tu8jkpvo92f821qykacxbbvok | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1. ...
show more
[Budyn SOC Canary] | Event: AWS Key Compromised! | Evidence: | Memo: AWS_Token_2 | Action: AWS API Call | Token ID: tu8jkpvo92f821qykacxbbvok | Client tool: aws-sdk-go-v2/1.45.1 ua/2.1 os/linux lang/go#1.25.14 md/GOOS#linux md/GOARCH#amd64 api/sts#1.46.0 m/e
show less
Hacking
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-11-05 22:52:27
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-11-04 07:30:22
UTC ·
(3 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-25 09:35:37
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-21 23:21:04
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Petros Stefanakis
2026-10-20 19:11:16
UTC ·
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 172.70.47.146 (-)
SQL Injection
🇩🇪
www.mammazone.it
2026-10-07 23:21:50
UTC ·
(4 weeks ago)
[Thu Oct 08 01:21:49.610502 2026] [access_compat:error] [pid 47313] [client 172.70.47.146:10930] AH01797: client denied by server configuration: /var/www/underdomotic.fabiodirauso.it/.config
[Thu Oct 08 01:21:50.366381 2026] [access_compat:error] [pi ...
show more
[Thu Oct 08 01:21:49.610502 2026] [access_compat:error] [pid 47313] [client 172.70.47.146:10930] AH01797: client denied by server configuration: /var/www/underdomotic.fabiodirauso.it/.config
[Thu Oct 08 01:21:50.366381 2026] [access_compat:error] [pid 41679] [client 172.70.47.146:10931] AH01797: client denied by server configuration: /var/www/underdomotic.fabiodirauso.it/.config
...
show less
Hacking
Anonymous
2026-10-07 05:54:51
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack