๐ฎ๐ณ
4.224.45.129
1 hour ago
Wazuh Alert Evidence: 4.224.45.129 (4.224.45.129) - - [13/Sep/2026:06:48:41 +0800] "GET /this_is_a_n ...
show more
Wazuh Alert Evidence: 4.224.45.129 (4.224.45.129) - - [13/Sep/2026:06:48:41 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 465 "-" "-"
show less
Web App Attack
๐ธ๐ฌ
152.32.217.163
3 hours ago
Wazuh Alert Evidence: Sep 12 20:24:08 pico-gw1 named[256141]: client @0xffffa801c648 152.32.217.163# ...
show more
Wazuh Alert Evidence: Sep 12 20:24:08 pico-gw1 named[256141]: client @0xffffa801c648 152.32.217.163#55276 (baidu.com): query (cache) 'baidu.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ฎ๐ฑ
35.252.0.94
6 hours ago
Wazuh Alert Evidence: 35.252.0.94 (35.252.0.94) - - [13/Sep/2026:01:41:07 +0800] "GET /.git/config H ...
show more
Wazuh Alert Evidence: 35.252.0.94 (35.252.0.94) - - [13/Sep/2026:01:41:07 +0800] "GET /.git/config HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
๐ป๐ณ
124.158.13.4
6 hours ago
Wazuh Alert Evidence: 124.158.13.4 (124.158.13.4) - - [13/Sep/2026:01:38:05 +0800] "POST /cgi-bin/.% ...
show more
Wazuh Alert Evidence: 124.158.13.4 (124.158.13.4) - - [13/Sep/2026:01:38:05 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 487 "-" "libredtail-http"
show less
Web App Attack
๐ณ๐ฑ
193.176.31.242
6 hours ago
Wazuh Alert Evidence: Sep 12 17:11:57 pico-gw1 named[256141]: client @0xffffa800ed58 193.176.31.242# ...
show more
Wazuh Alert Evidence: Sep 12 17:11:57 pico-gw1 named[256141]: client @0xffffa800ed58 193.176.31.242#9054 (cloudflare.com): query (cache) 'cloudflare.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ฉ๐ช
69.5.169.77
6 hours ago
Wazuh Alert Evidence: Sep 12 17:11:44 pico-gw1 named[256141]: client @0xffffa4015df8 69.5.169.77#536 ...
show more
Wazuh Alert Evidence: Sep 12 17:11:44 pico-gw1 named[256141]: client @0xffffa4015df8 69.5.169.77#53695 (cloudflare.com): query (cache) 'cloudflare.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐บ๐ธ
185.191.171.4
7 hours ago
Wazuh Alert Evidence: 185.191.171.4 (185.191.171.4) - - [12/Sep/2026:23:52:40 +0800] "GET /sitemap.x ...
show more
Wazuh Alert Evidence: 185.191.171.4 (185.191.171.4) - - [12/Sep/2026:23:52:40 +0800] "GET /sitemap.xml HTTP/1.1" 404 5212 "-" "Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)"
show less
Web App Attack
๐ธ๐ฌ
47.236.38.26
10 hours ago
Wazuh Alert Evidence: Sep 12 13:38:23 pico-gw1 named[256141]: client @0xffffa40221b8 47.236.38.26#49 ...
show more
Wazuh Alert Evidence: Sep 12 13:38:23 pico-gw1 named[256141]: client @0xffffa40221b8 47.236.38.26#49742 (baidu.com): query (cache) 'baidu.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐บ๐ธ
172.169.250.24
10 hours ago
Wazuh Alert Evidence: 172.169.250.24 (172.169.250.24) - - [12/Sep/2026:21:26:34 +0800] "GET /ReportS ...
show more
Wazuh Alert Evidence: 172.169.250.24 (172.169.250.24) - - [12/Sep/2026:21:26:34 +0800] "GET /ReportServer HTTP/1.1" 404 4991 "-" "Mozilla/5.0 zgrab/0.x"
show less
Web App Attack
๐ณ๐ฑ
34.6.243.255
10 hours ago
Wazuh Alert Evidence: 34.6.243.255 (34.6.243.255) - - [12/Sep/2026:21:18:46 +0800] "GET /__aws_leak_ ...
show more
Wazuh Alert Evidence: 34.6.243.255 (34.6.243.255) - - [12/Sep/2026:21:18:46 +0800] "GET /__aws_leak_probe_d2c7d993__ HTTP/1.1" 404 466 "-" "Mozilla/5.0 (compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user)"
show less
Web App Attack
๐บ๐ธ
172.178.85.71
10 hours ago
Wazuh Alert Evidence: 172.178.85.71 (172.178.85.71) - - [12/Sep/2026:21:17:33 +0800] "GET /autodisco ...
show more
Wazuh Alert Evidence: 172.178.85.71 (172.178.85.71) - - [12/Sep/2026:21:17:33 +0800] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 404 4991 "-" "Mozilla/5.0 zgrab/0.x"
show less
Web App Attack
๐ฌ๐ง
195.96.139.98
11 hours ago
Wazuh Alert Evidence: Sep 12 12:01:26 pico-gw1 named[256141]: client @0xffffa801d4d8 195.96.139.98#4 ...
show more
Wazuh Alert Evidence: Sep 12 12:01:26 pico-gw1 named[256141]: client @0xffffa801d4d8 195.96.139.98#40135 (m7fpbwnnp3dng.r5-98-62.dnscheck.internet-measurement.com): query (cache) 'm7fpbwnnp3dng.r5-98-62.dnscheck.internet-measurement.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ฉ๐ช
64.89.163.14
12 hours ago
Wazuh Alert Evidence: 64.89.163.14 (64.89.163.14) - - [12/Sep/2026:19:45:55 +0800] "GET /.env HTTP/1 ...
show more
Wazuh Alert Evidence: 64.89.163.14 (64.89.163.14) - - [12/Sep/2026:19:45:55 +0800] "GET /.env HTTP/1.1" 404 5014 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Firefox/102.0"
show less
Web App Attack
๐บ๐ธ
173.239.198.95
12 hours ago
Wazuh Alert Evidence: 173.239.198.95 (173.239.198.95) - - [12/Sep/2026:19:42:55 +0800] "GET /.env HT ...
show more
Wazuh Alert Evidence: 173.239.198.95 (173.239.198.95) - - [12/Sep/2026:19:42:55 +0800] "GET /.env HTTP/1.1" 404 5069 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
show less
Web App Attack
๐ณ๐ฑ
217.60.76.129
13 hours ago
Wazuh Alert Evidence: Sep 12 10:28:40 pico-gw1 named[256141]: client @0xffffa800ed58 217.60.76.129#3 ...
show more
Wazuh Alert Evidence: Sep 12 10:28:40 pico-gw1 named[256141]: client @0xffffa800ed58 217.60.76.129#32646 (google.com): query (cache) 'google.com/TXT/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ณ๐ฑ
185.93.89.43
13 hours ago
Wazuh Alert Evidence: 185.93.89.43 (185.93.89.43) - - [12/Sep/2026:18:12:06 +0800] "GET /template/cu ...
show more
Wazuh Alert Evidence: 185.93.89.43 (185.93.89.43) - - [12/Sep/2026:18:12:06 +0800] "GET /template/custom/content-editor HTTP/1.1" 404 4998 "http://114.32.32.181/template/custom/content-editor" "Mozilla/5.0 (X11; Linux x86_64; rv:1.9.5.20) Gecko/ Firefox/3.6.8"
show less
Web App Attack
๐บ๐ธ
154.16.115.33
14 hours ago
Wazuh Alert Evidence: Sep 12 09:11:35 pico-gw1 postfix/smtpd[322690]: warning: hostname smethurstmin ...
show more
Wazuh Alert Evidence: Sep 12 09:11:35 pico-gw1 postfix/smtpd[322690]: warning: hostname smethurstministries.org does not resolve to address 154.16.115.33
show less
Hacking
๐บ๐ธ
107.173.160.165
14 hours ago
Wazuh Alert Evidence: 107.173.160.165 (107.173.160.165) - - [12/Sep/2026:16:54:06 +0800] "GET /.env ...
show more
Wazuh Alert Evidence: 107.173.160.165 (107.173.160.165) - - [12/Sep/2026:16:54:06 +0800] "GET /.env HTTP/1.1" 404 5261 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36"
show less
Web App Attack
๐ฒ๐ฝ
177.249.170.51
16 hours ago
Wazuh Alert Evidence: Sep 12 07:24:53 pico-gw1 postfix/smtpd[320463]: warning: hostname 177.249.170. ...
show more
Wazuh Alert Evidence: Sep 12 07:24:53 pico-gw1 postfix/smtpd[320463]: warning: hostname 177.249.170.51-clientes-zap-izzi.mx does not resolve to address 177.249.170.51: Name or service not known
show less
Hacking
๐บ๐ธ
18.235.110.182
17 hours ago
Wazuh Alert Evidence: 18.235.110.182 (18.235.110.182) - - [12/Sep/2026:14:31:19 +0800] "GET / HTTP/1 ...
show more
Wazuh Alert Evidence: 18.235.110.182 (18.235.110.182) - - [12/Sep/2026:14:31:19 +0800] "GET / HTTP/1.1" 421 5148 "-" "RecordedFuture Global Inventory Crawler"
show less
Web App Attack
๐จ๐ณ
110.42.233.150
17 hours ago
Wazuh Alert Evidence: 110.42.233.150 (110.42.233.150) - - [12/Sep/2026:14:26:26 +0800] "GET /phpmyad ...
show more
Wazuh Alert Evidence: 110.42.233.150 (110.42.233.150) - - [12/Sep/2026:14:26:26 +0800] "GET /phpmyadmin/index.php HTTP/1.1" 404 5249 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3464.0 Safari/537.36"
show less
Web App Attack
๐ซ๐ท
194.163.170.0
17 hours ago
Wazuh Alert Evidence: 194.163.170.0 (194.163.170.0) - - [12/Sep/2026:14:07:35 +0800] "POST /cgi-bin/ ...
show more
Wazuh Alert Evidence: 194.163.170.0 (194.163.170.0) - - [12/Sep/2026:14:07:35 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 5225 "-" "libredtail-http"
show less
Web App Attack
๐ฉ๐ช
206.189.58.129
18 hours ago
Wazuh Alert Evidence: Sep 12 05:34:50 pico-gw1 named[256141]: client @0xffffac05d598 206.189.58.129# ...
show more
Wazuh Alert Evidence: Sep 12 05:34:50 pico-gw1 named[256141]: client @0xffffac05d598 206.189.58.129#39231 (dNS-uDp-scaN-0.iO.INternetdaTA.IO): query (cache) 'dNS-uDp-scaN-0.iO.INternetdaTA.IO/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ฎ๐ฑ
35.252.13.210
19 hours ago
Wazuh Alert Evidence: 35.252.13.210 (35.252.13.210) - - [12/Sep/2026:12:48:55 +0800] "GET /.git/conf ...
show more
Wazuh Alert Evidence: 35.252.13.210 (35.252.13.210) - - [12/Sep/2026:12:48:55 +0800] "GET /.git/config HTTP/1.1" 404 520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฌ๐ง
193.32.209.247
20 hours ago
Wazuh Alert Evidence: Sep 12 03:48:56 pico-gw1 named[256141]: client @0xffffb14c00e8 193.32.209.247# ...
show more
Wazuh Alert Evidence: Sep 12 03:48:56 pico-gw1 named[256141]: client @0xffffb14c00e8 193.32.209.247#35703 (cloudflare.com): query (cache) 'cloudflare.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking