Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.53.6
144.31.53.6 - - [16/May/2026:08:17:32 +0000] "GET /.git/HEAD HTTP/1.1" 404 4809 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 40 events
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.223.52
144.31.223.52 - - [16/May/2026:23:14:06 +0000] "GET /phpmyadmin/ HTTP/1.1" 403 5170 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
Count: 39 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 95.85.251.81
sshd[10209]: Failed password for invalid user minecraft from 95.85.251.81 port 47343 ssh2
Count: 100 events in 164s | 15/May/2026:21:21:02 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 95.85.251.88
95.85.251.88 - - [16/May/2026:12:27:41 +0000] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 400 6954 "-" "python-requests/2.31.0"
Count: 19 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.148.199
sshd[29403]: Failed password for invalid user test from 144.31.148.199 port 36526 ssh2
Count: 95 events in 568s | 15/May/2026:20:52:53 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.148.160
sshd[33211]: Failed password for invalid user deploy from 144.31.148.160 port 50723 ssh2
Count: 99 events in 435s | 16/May/2026:05:55:26 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 95.85.251.108
95.85.251.108 - - [15/May/2026:11:56:58 +0000] "GET /cgi-bin/luci HTTP/1.1" 403 3820 "-" "python-requests/2.32.3"
Count: 50 events
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.238.186
144.31.238.186 - - [15/May/2026:23:39:53 +0000] "GET /.git/HEAD HTTP/1.1" 404 2037 "-" "python-requests/2.31.0"
Count: 9 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.148.202
sshd[63783]: Failed password for invalid user centos from 144.31.148.202 port 46936 ssh2
Count: 99 events in 209s | 15/May/2026:22:05:51 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.135
sshd[19146]: Failed password for invalid user ftpuser from 144.31.238.135 port 55977 ssh2
Count: 53 events in 68s | 15/May/2026:19:45:37 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.243
sshd[41204]: Failed password for invalid user www-data from 144.31.238.243 port 59337 ssh2
Count: 19 events in 77s | 16/May/2026:14:29:04 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.223.204
144.31.223.204 - - [14/May/2026:12:05:09 +0000] "GET /manager/html HTTP/1.1" 403 2594 "-" "python-requests/2.32.3"
Count: 18 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 95.85.251.156
sshd[47111]: Failed password for invalid user minecraft from 95.85.251.156 port 41892 ssh2
Count: 79 events in 253s | 14/May/2026:09:12:21 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.110
sshd[55876]: Failed password for invalid user ec2-user from 144.31.238.110 port 56193 ssh2
Count: 75 events in 147s | 14/May/2026:17:37:53 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.202
sshd[20672]: Failed password for invalid user ec2-user from 2.26.122.202 port 35780 ssh2
Count: 69 events in 135s | 15/May/2026:18:52:28 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.111
sshd[21734]: Failed password for invalid user ftpuser from 144.31.238.111 port 59151 ssh2
Count: 66 events in 540s | 16/May/2026:07:46:01 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.53.57
144.31.53.57 - - [14/May/2026:08:52:28 +0000] "GET /info.php HTTP/1.1" 403 4897 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
Count: 36 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.63
sshd[9804]: Failed password for invalid user pi from 144.31.223.63 port 45246 ssh2
Count: 28 events in 39s | 16/May/2026:12:52:00 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 2.26.123.101
2.26.123.101 - - [15/May/2026:17:50:44 +0000] "GET /api/graphql HTTP/1.1" 400 4541 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 17 events
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.