๐จ๐ณ
112.46.214.104
6 minutes ago
Wazuh Alert Evidence: 112.46.214.104 (112.46.214.104) - - [27/Jul/2026:09:25:01 +0800] "GET / HTTP/1 ...
show more
Wazuh Alert Evidence: 112.46.214.104 (112.46.214.104) - - [27/Jul/2026:09:25:01 +0800] "GET / HTTP/1.1" 400 486 "-" "-"
show less
Web App Attack
๐จ๐ณ
218.25.230.76
22 minutes ago
Wazuh Alert Evidence: Jul 27 01:08:45 pico-gw1 postfix/smtpd[2742331]: warning: unknown[218.25.230.7 ...
show more
Wazuh Alert Evidence: Jul 27 01:08:45 pico-gw1 postfix/smtpd[2742331]: warning: unknown[218.25.230.76]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
๐ณ๐ด
51.120.79.193
25 minutes ago
Wazuh Alert Evidence: 51.120.79.193 (51.120.79.193) - - [27/Jul/2026:09:06:35 +0800] "GET /this_is_a ...
show more
Wazuh Alert Evidence: 51.120.79.193 (51.120.79.193) - - [27/Jul/2026:09:06:35 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 435 "-" "-"
show less
Web App Attack
๐ฎ๐ณ
117.222.0.200
26 minutes ago
Wazuh Alert Evidence: Jul 27 01:05:29 pico-gw1 postfix/smtpd[2742214]: warning: unknown[117.222.0.20 ...
show more
Wazuh Alert Evidence: Jul 27 01:05:29 pico-gw1 postfix/smtpd[2742214]: warning: unknown[117.222.0.200]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
๐ณ๐ฑ
46.129.5.250
1 hour ago
Wazuh Alert Evidence: Jul 27 00:25:23 pico-gw1 postfix/smtpd[2741372]: warning: 46-129-5-250.cable.d ...
show more
Wazuh Alert Evidence: Jul 27 00:25:23 pico-gw1 postfix/smtpd[2741372]: warning: 46-129-5-250.cable.dynamic.v4.ziggo.nl[46.129.5.250]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
๐จ๐ณ
106.75.138.1
1 hour ago
Wazuh Alert Evidence: 106.75.138.1 (106.75.138.1) - - [27/Jul/2026:08:24:19 +0800] "GET / HTTP/1.0" ...
show more
Wazuh Alert Evidence: 106.75.138.1 (106.75.138.1) - - [27/Jul/2026:08:24:19 +0800] "GET / HTTP/1.0" 400 622 "-" "-"
show less
Web App Attack
๐บ๐ธ
150.107.36.82
1 hour ago
Wazuh Alert Evidence: 150.107.36.82 (150.107.36.82) - - [27/Jul/2026:08:23:58 +0800] "GET / HTTP/1.0 ...
show more
Wazuh Alert Evidence: 150.107.36.82 (150.107.36.82) - - [27/Jul/2026:08:23:58 +0800] "GET / HTTP/1.0" 400 622 "-" "-"
show less
Web App Attack
๐ฌ๐ง
31.14.254.66
1 hour ago
Wazuh Alert Evidence: Jul 26 23:45:04 pico-gw1 postfix/smtpd[2740454]: warning: hostname 31-14-254-6 ...
show more
Wazuh Alert Evidence: Jul 26 23:45:04 pico-gw1 postfix/smtpd[2740454]: warning: hostname 31-14-254-66.infrawat.ch does not resolve to address 31.14.254.66: Name or service not known
show less
Hacking
๐ฌ๐ง
81.19.219.248
1 hour ago
Wazuh Alert Evidence: Jul 26 23:45:02 pico-gw1 postfix/smtpd[2740454]: warning: hostname 81-19-219-2 ...
show more
Wazuh Alert Evidence: Jul 26 23:45:02 pico-gw1 postfix/smtpd[2740454]: warning: hostname 81-19-219-248.infrawat.ch does not resolve to address 81.19.219.248: Name or service not known
show less
Hacking
๐ซ๐ท
213.32.24.2
2 hours ago
Wazuh Alert Evidence: 213.32.24.2 (213.32.24.2) - - [27/Jul/2026:06:42:32 +0800] "GET /.env HTTP/1.1 ...
show more
Wazuh Alert Evidence: 213.32.24.2 (213.32.24.2) - - [27/Jul/2026:06:42:32 +0800] "GET /.env HTTP/1.1" 404 465 "http://114.32.32.181/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Web App Attack
๐จ๐ณ
112.66.191.30
3 hours ago
Wazuh Alert Evidence: Jul 26 22:13:49 pico-gw1 postfix/smtpd[2738307]: warning: unknown[112.66.191.3 ...
show more
Wazuh Alert Evidence: Jul 26 22:13:49 pico-gw1 postfix/smtpd[2738307]: warning: unknown[112.66.191.30]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
๐ซ๐ท
185.190.142.132
3 hours ago
Wazuh Alert Evidence: 185.190.142.132 (185.190.142.132) - - [27/Jul/2026:05:57:10 +0800] "POST /cgi- ...
show more
Wazuh Alert Evidence: 185.190.142.132 (185.190.142.132) - - [27/Jul/2026:05:57:10 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 487 "-" "libredtail-http"
show less
Web App Attack
๐ฑ๐น
141.98.9.67
3 hours ago
Wazuh Alert Evidence: Jul 26 21:45:20 pico-gw1 postfix/smtpd[2737669]: NOQUEUE: reject: RCPT from un ...
show more
Wazuh Alert Evidence: Jul 26 21:45:20 pico-gw1 postfix/smtpd[2737669]: NOQUEUE: reject: RCPT from unknown[141.98.9.67]: 450 4.7.25 Client host rejected: cannot find your hostname, [141.98.9.67]; from=<[email protected] > to=<[email protected] > proto=SMTP helo=<win-clj1b0gq6jp.domain>
show less
Hacking
๐บ๐ธ
40.124.168.156
4 hours ago
Wazuh Alert Evidence: 40.124.168.156 (40.124.168.156) - - [27/Jul/2026:05:24:04 +0800] "GET /develop ...
show more
Wazuh Alert Evidence: 40.124.168.156 (40.124.168.156) - - [27/Jul/2026:05:24:04 +0800] "GET /developmentserver/metadatauploader HTTP/1.1" 404 5025 "-" "Mozilla/5.0 zgrab/0.x"
show less
Web App Attack
๐ท๐บ
62.249.157.21
5 hours ago
Wazuh Alert Evidence: Jul 26 20:01:04 pico-gw1 named[2630724]: client @0xffffa807c9b8 62.249.157.21# ...
show more
Wazuh Alert Evidence: Jul 26 20:01:04 pico-gw1 named[2630724]: client @0xffffa807c9b8 62.249.157.21#39507 (.): query (cache) './ANY/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ฉ๐ช
20.79.250.162
5 hours ago
Wazuh Alert Evidence: 20.79.250.162 (20.79.250.162) - - [27/Jul/2026:03:42:40 +0800] "GET /this_is_a ...
show more
Wazuh Alert Evidence: 20.79.250.162 (20.79.250.162) - - [27/Jul/2026:03:42:40 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 455 "-" "-"
show less
Web App Attack
๐ญ๐ฐ
199.45.154.151
6 hours ago
Wazuh Alert Evidence: 199.45.154.151 (199.45.154.151) - - [27/Jul/2026:03:08:11 +0800] "GET /sitemap ...
show more
Wazuh Alert Evidence: 199.45.154.151 (199.45.154.151) - - [27/Jul/2026:03:08:11 +0800] "GET /sitemap.xml HTTP/1.1" 404 4992 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
show less
Web App Attack
๐ฌ๐ง
151.2.204.84
6 hours ago
Wazuh Alert Evidence: Jul 26 18:57:00 pico-gw1 postfix/smtpd[2733251]: warning: unknown[151.2.204.84 ...
show more
Wazuh Alert Evidence: Jul 26 18:57:00 pico-gw1 postfix/smtpd[2733251]: warning: unknown[151.2.204.84]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
๐ฌ๐ง
185.247.137.160
7 hours ago
Wazuh Alert Evidence: Jul 26 18:26:50 pico-gw1 named[2630724]: client @0xffffac0cb308 185.247.137.16 ...
show more
Wazuh Alert Evidence: Jul 26 18:26:50 pico-gw1 named[2630724]: client @0xffffac0cb308 185.247.137.160#59769 (rnoeqspmnezvw.r4-160-a0.dnscheck.internet-measurement.com): query (cache) 'rnoeqspmnezvw.r4-160-a0.dnscheck.internet-measurement.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
๐ต๐ญ
103.235.92.208
7 hours ago
Wazuh Alert Evidence: Jul 26 17:34:24 pico-gw1 postfix/smtpd[2731433]: warning: hostname customer.mn ...
show more
Wazuh Alert Evidence: Jul 26 17:34:24 pico-gw1 postfix/smtpd[2731433]: warning: hostname customer.mnlaphl1.isp.starlink.com does not resolve to address 103.235.92.208: Name or service not known
show less
Hacking
๐จ๐ณ
183.23.53.237
7 hours ago
Wazuh Alert Evidence: Jul 26 17:33:53 pico-gw1 postfix/smtpd[2731433]: warning: unknown[183.23.53.23 ...
show more
Wazuh Alert Evidence: Jul 26 17:33:53 pico-gw1 postfix/smtpd[2731433]: warning: unknown[183.23.53.237]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
๐บ๐ธ
66.132.224.81
8 hours ago
Wazuh Alert Evidence: 66.132.224.81 (66.132.224.81) - - [27/Jul/2026:01:19:06 +0800] "GET /security. ...
show more
Wazuh Alert Evidence: 66.132.224.81 (66.132.224.81) - - [27/Jul/2026:01:19:06 +0800] "GET /security.txt HTTP/1.1" 404 4992 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
show less
Web App Attack
๐บ๐ธ
147.185.132.135
8 hours ago
Wazuh Alert Evidence: 147.185.132.135 (147.185.132.135) - - [27/Jul/2026:00:51:40 +0800] "GET /.well ...
show more
Wazuh Alert Evidence: 147.185.132.135 (147.185.132.135) - - [27/Jul/2026:00:51:40 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 4996 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
show less
Web App Attack
๐บ๐ธ
147.185.132.225
10 hours ago
Wazuh Alert Evidence: 147.185.132.225 (147.185.132.225) - - [26/Jul/2026:23:16:41 +0800] "GET /.well ...
show more
Wazuh Alert Evidence: 147.185.132.225 (147.185.132.225) - - [26/Jul/2026:23:16:41 +0800] "GET /.well-known/security.txt HTTP/1.1" 404 4999 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
show less
Web App Attack
๐ท๐บ
194.58.88.75
10 hours ago
Wazuh Alert Evidence: 194.58.88.75 (194.58.88.75) - - [26/Jul/2026:23:16:10 +0800] "GET /.env HTTP/1 ...
show more
Wazuh Alert Evidence: 194.58.88.75 (194.58.88.75) - - [26/Jul/2026:23:16:10 +0800] "GET /.env HTTP/1.1" 404 5010 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0"
show less
Web App Attack