Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.196
sshd[48769]: Failed password for invalid user guest from 144.31.223.196 port 51905 ssh2
Count: 85 events in 389s | 14/May/2026:04:23:56 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.246
sshd[63752]: Failed password for invalid user docker from 144.31.238.246 port 33455 ssh2
Count: 77 events in 235s | 14/May/2026:22:18:32 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.53.191
144.31.53.191 - - [15/May/2026:23:26:47 +0000] "GET /db.sql HTTP/1.1" 400 2798 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 6 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.211
sshd[6242]: Failed password for invalid user info from 144.31.223.211 port 54796 ssh2
Count: 63 events in 308s | 15/May/2026:10:51:53 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.169.187
sshd[39007]: Failed password for invalid user ftpuser from 144.31.169.187 port 40357 ssh2
Count: 20 events in 550s | 16/May/2026:16:18:29 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.184
sshd[47121]: Failed password for invalid user ftpuser from 2.26.122.184 port 35368 ssh2
Count: 33 events in 344s | 15/May/2026:10:45:22 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.53.218
sshd[6265]: Failed password for invalid user postgres from 144.31.53.218 port 36898 ssh2
Count: 13 events in 150s | 14/May/2026:10:36:01 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 95.85.251.19
95.85.251.19 - - [16/May/2026:23:53:34 +0000] "GET /info.php HTTP/1.1" 404 2762 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 13 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 95.85.251.26
sshd[26453]: Failed password for invalid user minecraft from 95.85.251.26 port 42891 ssh2
Count: 68 events in 487s | 16/May/2026:11:54:07 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.31
sshd[43447]: Failed password for invalid user vagrant from 144.31.238.31 port 43320 ssh2
Count: 99 events in 333s | 15/May/2026:13:37:17 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.234
sshd[62518]: Failed password for invalid user svn from 144.31.223.234 port 33309 ssh2
Count: 78 events in 189s | 14/May/2026:20:56:47 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.223.102
144.31.223.102 - - [14/May/2026:07:38:00 +0000] "GET /api/v1/namespaces HTTP/1.1" 403 2024 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
Count: 22 events
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 2.26.122.164
2.26.122.164 - - [14/May/2026:04:48:32 +0000] "GET /manager/status HTTP/1.1" 404 6406 "-" "python-requests/2.32.3"
Count: 50 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.238
sshd[61868]: Failed password for invalid user backup from 144.31.223.238 port 65101 ssh2
Count: 94 events in 546s | 16/May/2026:09:57:52 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.53.214
sshd[36357]: Failed password for invalid user deploy from 144.31.53.214 port 37533 ssh2
Count: 57 events in 330s | 16/May/2026:13:09:52 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.123.56
sshd[29246]: Failed password for invalid user pi from 2.26.123.56 port 52164 ssh2
Count: 44 events in 410s | 14/May/2026:16:58:47 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 2.26.123.21
2.26.123.21 - - [16/May/2026:00:48:00 +0000] "GET /wp-config.old HTTP/1.1" 404 258 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 6 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.223
sshd[32373]: Failed password for invalid user nagios from 2.26.122.223 port 61021 ssh2
Count: 26 events in 416s | 16/May/2026:18:39:00 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.40
sshd[32707]: Failed password for invalid user backup from 144.31.223.40 port 47104 ssh2
Count: 57 events in 365s | 14/May/2026:04:03:47 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.241
sshd[63055]: Failed password for invalid user test from 144.31.223.241 port 63780 ssh2
Count: 50 events in 53s | 15/May/2026:00:06:10 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.96
sshd[62714]: Failed password for invalid user info from 144.31.238.96 port 51926 ssh2
Count: 15 events in 376s | 16/May/2026:13:32:09 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.223.246
144.31.223.246 - - [15/May/2026:04:01:13 +0000] "GET /wp-config.old HTTP/1.1" 404 887 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 44 events
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.169.52
144.31.169.52 - - [16/May/2026:11:08:55 +0000] "GET /db.sql HTTP/1.1" 400 1348 "-" "python-requests/2.31.0"
Count: 6 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.169.49
sshd[51253]: Failed password for invalid user svn from 144.31.169.49 port 62776 ssh2
Count: 83 events in 537s | 14/May/2026:11:08:40 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 31.76.244.106
sshd[28514]: Failed password for invalid user centos from 31.76.244.106 port 62486 ssh2
Count: 5 events in 228s | 14/May/2026:21:17:44 +0000
show less
Brute-ForceSSH
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.