🇨🇭
Kepler-1649c
2026-11-11 11:08:46
UTC ·
(2 days ago)
Detected Attack: ffuf.Web.Fuzzer
Hacking
Anonymous
2026-11-04 06:36:29
UTC ·
(1 week ago)
[ns41.kdns.gr] httpd-config-scan: sites=sostis.gr; logs=/var/log/httpd/domains/sostis.gr.log; samples=/.git/head | fast_lane=true kernel_at=2026-11-04T06:34:12+00:00 | requests=1
Hacking
Web App Attack
🇩🇪
throny
2026-11-02 05:17:53
UTC ·
(1 week ago)
Used stolen an AWS access key (a canary token harvested from a honeypot's fake config file) at 2026-11-02 05:10 UTC, API call GetSMSAttributes, client aws-cli/2.36.44 md/awscrt#0.36.2 ua/2.1 os/linux#5.15.0-25-generic md/arch#x86_64 lang/python#3.14. ...
show more
Used stolen an AWS access key (a canary token harvested from a honeypot's fake config file) at 2026-11-02 05:10 UTC, API call GetSMSAttributes, client aws-cli/2.36.44 md/awscrt#0.36.2 ua/2.1 os/linux#5.15.0-25-generic md/arch#x86_64 lang/python#3.14.6 md/pyimpl#CPython m
show less
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-26 20:56:13
UTC ·
(2 weeks ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_8 | Action: AWS API Call | Token: 95b23kxelv1qyzc6evkizbyhn | Client Tool: Boto3/1.42.60 md/Botocore#1.42.60 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.10.12 md/pyimpl ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_8 | Action: AWS API Call | Token: 95b23kxelv1qyzc6evkizbyhn | Client Tool: Boto3/1.42.60 md/Botocore#1.42.60 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.10.12 md/pyimpl#CPython m/Z,b,E,e cfg/retry-mode#standard B...
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-14 21:59:13
UTC ·
(4 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-13.
Web App Attack
SSH
Hacking
🇵🇱
Budyn
2026-10-13 15:30:48
UTC ·
(4 weeks ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbmqxvagp71pskep78twdp5w | Client Tool: aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl# ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_1 | Action: AWS API Call | Token: jjbmqxvagp71pskep78twdp5w | Client Tool: aws-cli/2.33.12 md/awscrt#0.31.1 ua/2.1 os/linux#5.15.0-191-generic md/arch#x86_64 lang/python#3.13.11 md/pyimpl#CPython m/E,b,Z,g cfg/retry-mode#standard md...
show less
Hacking
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-10-10 09:23:44
UTC ·
(1 month ago)
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_12 | Action: AWS API Call | Token: akf9s74n5eldbzbpzbzf5lt45 | Client Tool: Boto3/1.43.101 md/Botocore#1.43.101 ua/2.1 os/linux#5.15.0-25-generic md/arch#x86_64 lang/python#3.10.4 md/pyimp ...
show more
Budyn SOC Canary Trap: AWS Key Compromised! | Memo: AWS_Token_12 | Action: AWS API Call | Token: akf9s74n5eldbzbpzbzf5lt45 | Client Tool: Boto3/1.43.101 md/Botocore#1.43.101 ua/2.1 os/linux#5.15.0-25-generic md/arch#x86_64 lang/python#3.10.4 md/pyimpl#CPython m/E,b,Z,e cfg/retry-mode#standard B...
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-04 21:59:22
UTC ·
(1 month ago)
Auto-ban: >3000 req/min op 2026-10-04
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-30 10:41:07
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 66.207.179.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:40:59.367917 2026] [security2:error] [pid 18708:tid 18708] [client 66.207.179.107:48285] ...
show more
(mod_security) mod_security (id:210492) triggered by 66.207.179.107 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 06:40:59.367917 2026] [security2:error] [pid 18708:tid 18708] [client 66.207.179.107:48285] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fatcaverecords.com"] [uri "/.git/HEAD"] [unique_id "arznO-OBzshj3t4U5Xeg8wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
Olexiy Backend
2026-09-25 12:27:40
UTC ·
(1 month ago)
66.207.179.107
...
Bad Web Bot
Web App Attack
Anonymous
2026-07-24 12:54:21
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
2026-07-22 06:38:38
UTC ·
(3 months ago)
This IP was involved in a brute force and password spray attack.
Brute-Force
Web App Attack
Anonymous
2025-12-08 10:44:41
UTC ·
(11 months ago)
botnet
DDoS Attack