🇨🇭
Kepler-1649c
2026-11-11 11:29:10
UTC ·
(1 day ago)
Detected Attack: HTPasswd.Access ffuf.Web.Fuzzer
Hacking
🇩🇪
throny
2026-11-02 05:18:23
UTC ·
(1 week ago)
Used stolen an AWS access key (a canary token harvested from a honeypot's fake config file) at 2026-11-02 05:09 UTC, API call GetSendQuota, client aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-202-generic md/arch#x86_64 lang/python#3.13.11 ...
show more
Used stolen an AWS access key (a canary token harvested from a honeypot's fake config file) at 2026-11-02 05:09 UTC, API call GetSendQuota, client aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-202-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl#CPython
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-14 20:57:40
UTC ·
(4 weeks ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbmqxvagp71pskep78twdp5w | Client Tool: aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl# ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbmqxvagp71pskep78twdp5w | Client Tool: aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl#CPython m/Z,g,E,b cfg/retry-mode#standard md...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 08:23:55
UTC ·
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 206.232.0.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:23:48.982199 2026] [security2:error] [pid 28905:tid 28905] [client 206.232.0.93:45115] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.0.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 04:23:48.982199 2026] [security2:error] [pid 28905:tid 28905] [client 206.232.0.93:45115] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krugmans.net"] [uri "/.git/HEAD"] [unique_id "as3qlAlLTa7UHQ4qX9V4iwAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 03:17:29
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 206.232.0.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 23:17:23.780573 2026] [security2:error] [pid 31989:tid 31989] [client 206.232.0.93:62945] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 206.232.0.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 23:17:23.780573 2026] [security2:error] [pid 31989:tid 31989] [client 206.232.0.93:62945] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathleenullmann.com"] [uri "/.git/HEAD"] [unique_id "asxRQ5SNiKbdGG8ej7ruMwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-16 18:30:08
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 206.232.0.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 14:30:03.789237 2026] [security2:error] [pid 16671:tid 16683] [client 206.232.0.93:31585] Mod ...
show more
(mod_security) mod_security (id:210730) triggered by 206.232.0.93 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 16 14:30:03.789237 2026] [security2:error] [pid 16671:tid 16683] [client 206.232.0.93:31585] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aafm.org|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aafm.org"] [uri "/http/charteredfinancialmanager.com"] [unique_id "aoIBqy77kXCis3izCiYOvQAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-04 11:19:43
UTC ·
(3 months ago)
FortiWeb WAF: 22 attacks detected. Threat Score: 10715555. Types: Client Management(11), Signature Detection(11). Origin: United States.
Web App Attack
2026-07-21 22:53:43
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
2026-01-11 01:16:19
UTC ·
(10 months ago)
206.232.0.93 - - [11/Jan/2026:02:16:19 +0100] "GET /mysql.sql HTTP/1.1" 403 4977 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
Web App Attack
🇮🇩
BPS-StatisticsIndonesia
2025-04-04 09:42:08
UTC ·
(1 year ago)
WP Login Scan Activities
Web App Attack
2024-11-11 07:50:09
UTC ·
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
2024-10-30 22:55:18
UTC ·
(2 years ago)
Automatic report - Vulnerability scan
/RDWeb/Pages/en-US/login.aspx
Web App Attack
