π»π³
115.75.112.190
58 minutes ago
Wazuh Alert Evidence: Jul 27 23:23:07 pico-gw1 postfix/smtpd[2775185]: warning: unknown[115.75.112.1 ...
show more
Wazuh Alert Evidence: Jul 27 23:23:07 pico-gw1 postfix/smtpd[2775185]: warning: unknown[115.75.112.190]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
πΊπΈ
66.132.186.169
59 minutes ago
Wazuh Alert Evidence: 66.132.186.169 (66.132.186.169) - - [28/Jul/2026:07:22:26 +0800] "PRI * HTTP/2 ...
show more
Wazuh Alert Evidence: 66.132.186.169 (66.132.186.169) - - [28/Jul/2026:07:22:26 +0800] "PRI * HTTP/2.0" 400 486 "-" "-"
show less
Web App Attack
π©πͺ
4.185.41.66
1 hour ago
Wazuh Alert Evidence: 4.185.41.66 (4.185.41.66) - - [28/Jul/2026:06:40:49 +0800] "GET /wp-content/pl ...
show more
Wazuh Alert Evidence: 4.185.41.66 (4.185.41.66) - - [28/Jul/2026:06:40:49 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 455 "-" "-"
show less
Web App Attack
π¨π³
123.13.67.129
1 hour ago
Wazuh Alert Evidence: Jul 27 22:35:37 pico-gw1 postfix/smtpd[2774060]: warning: hostname hn.kd.ny.ad ...
show more
Wazuh Alert Evidence: Jul 27 22:35:37 pico-gw1 postfix/smtpd[2774060]: warning: hostname hn.kd.ny.adsl does not resolve to address 123.13.67.129: Name or service not known
show less
Hacking
π§π©
144.79.133.40
2 hours ago
Wazuh Alert Evidence: Jul 27 22:09:59 pico-gw1 postfix/smtpd[2773404]: warning: mail.ieducationbd.co ...
show more
Wazuh Alert Evidence: Jul 27 22:09:59 pico-gw1 postfix/smtpd[2773404]: warning: mail.ieducationbd.com[144.79.133.40]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
πΈπ¬
47.236.245.103
2 hours ago
Wazuh Alert Evidence: 47.236.245.103 (47.236.245.103) - - [28/Jul/2026:05:27:31 +0800] "GET / HTTP/1 ...
show more
Wazuh Alert Evidence: 47.236.245.103 (47.236.245.103) - - [28/Jul/2026:05:27:31 +0800] "GET / HTTP/1.1" 400 486 "-" "curl/7.78.0"
show less
Web App Attack
πΊπΈ
52.238.192.78
3 hours ago
Wazuh Alert Evidence: 52.238.192.78 (52.238.192.78) - - [28/Jul/2026:04:47:34 +0800] "GET /wp-conten ...
show more
Wazuh Alert Evidence: 52.238.192.78 (52.238.192.78) - - [28/Jul/2026:04:47:34 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5194 "-" "-"
show less
Web App Attack
πͺπΈ
85.51.235.230
3 hours ago
Wazuh Alert Evidence: Jul 27 20:38:54 pico-gw1 postfix/smtpd[2770725]: warning: hostname 230.pool85- ...
show more
Wazuh Alert Evidence: Jul 27 20:38:54 pico-gw1 postfix/smtpd[2770725]: warning: hostname 230.pool85-51-235.static.orange.es does not resolve to address 85.51.235.230: Name or service not known
show less
Hacking
πΊπΈ
216.51.185.177
3 hours ago
Wazuh Alert Evidence: Jul 27 20:38:42 pico-gw1 postfix/smtpd[2770725]: warning: unknown[216.51.185.1 ...
show more
Wazuh Alert Evidence: Jul 27 20:38:42 pico-gw1 postfix/smtpd[2770725]: warning: unknown[216.51.185.177]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
πΊπΈ
128.203.202.236
4 hours ago
Wazuh Alert Evidence: 128.203.202.236 (128.203.202.236) - - [28/Jul/2026:04:10:01 +0800] "GET / HTTP ...
show more
Wazuh Alert Evidence: 128.203.202.236 (128.203.202.236) - - [28/Jul/2026:04:10:01 +0800] "GET / HTTP/1.0" 400 622 "-" "-"
show less
Web App Attack
πΊπΈ
183.81.168.186
4 hours ago
Wazuh Alert Evidence: 183.81.168.186 (183.81.168.186) - - [28/Jul/2026:04:08:40 +0800] "GET /..%2F.. ...
show more
Wazuh Alert Evidence: 183.81.168.186 (183.81.168.186) - - [28/Jul/2026:04:08:40 +0800] "GET /..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd HTTP/1.1" 404 455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:146.0) Gecko/20100101 Firefox/146.0"
show less
Web App Attack
π©πͺ
45.135.193.115
4 hours ago
Wazuh Alert Evidence: Jul 27 20:00:10 pico-gw1 named[2630724]: client @0xffffa007d558 45.135.193.115 ...
show more
Wazuh Alert Evidence: Jul 27 20:00:10 pico-gw1 named[2630724]: client @0xffffa007d558 45.135.193.115#55600 (dhitc.com): query (cache) 'dhitc.com/ANY/IN' denied (allow-query-cache did not match)
show less
Hacking
πΊπΈ
66.132.195.46
4 hours ago
Wazuh Alert Evidence: Jul 27 19:26:32 pico-gw1 named[2630724]: client @0xffffb147c678 66.132.195.46# ...
show more
Wazuh Alert Evidence: Jul 27 19:26:32 pico-gw1 named[2630724]: client @0xffffb147c678 66.132.195.46#36151 (ip.parrotdns.com): query (cache) 'ip.parrotdns.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
πͺπΈ
158.158.32.229
6 hours ago
Wazuh Alert Evidence: 158.158.32.229 (158.158.32.229) - - [28/Jul/2026:01:22:46 +0800] "GET /wp-cont ...
show more
Wazuh Alert Evidence: 158.158.32.229 (158.158.32.229) - - [28/Jul/2026:01:22:46 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 455 "-" "-"
show less
Web App Attack
ππ°
45.125.16.209
7 hours ago
Wazuh Alert Evidence: 45.125.16.209 (45.125.16.209) - - [28/Jul/2026:00:57:52 +0800] "POST /cgi-bin/ ...
show more
Wazuh Alert Evidence: 45.125.16.209 (45.125.16.209) - - [28/Jul/2026:00:57:52 +0800] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 487 "-" "libredtail-http"
show less
Web App Attack
π°πͺ
197.231.177.149
8 hours ago
Wazuh Alert Evidence: Jul 27 15:37:31 pico-gw1 postfix/smtpd[2764078]: warning: unknown[197.231.177. ...
show more
Wazuh Alert Evidence: Jul 27 15:37:31 pico-gw1 postfix/smtpd[2764078]: warning: unknown[197.231.177.149]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=crab
show less
Brute-Force
πΊπΈ
52.14.52.209
8 hours ago
Wazuh Alert Evidence: Jul 27 15:28:25 pico-gw1 named[2630724]: client @0xffffa007d558 52.14.52.209#3 ...
show more
Wazuh Alert Evidence: Jul 27 15:28:25 pico-gw1 named[2630724]: client @0xffffa007d558 52.14.52.209#36429 (google.com): query (cache) 'google.com/A/IN' denied (allow-query-cache did not match)
show less
Hacking
π°π·
61.76.221.51
8 hours ago
Wazuh Alert Evidence: Jul 27 15:25:06 pico-gw1 postfix/smtpd[2763800]: warning: unknown[61.76.221.51 ...
show more
Wazuh Alert Evidence: Jul 27 15:25:06 pico-gw1 postfix/smtpd[2763800]: warning: unknown[61.76.221.51]: SASL LOGIN authentication failed: (reason unavailable), [email protected]
show less
Brute-Force
π¬π§
185.216.145.189
9 hours ago
Wazuh Alert Evidence: Jul 27 15:11:01 pico-gw1 postfix/smtpd[2763482]: warning: hostname 185-216-145 ...
show more
Wazuh Alert Evidence: Jul 27 15:11:01 pico-gw1 postfix/smtpd[2763482]: warning: hostname 185-216-145-189.infrawat.ch does not resolve to address 185.216.145.189: Name or service not known
show less
Hacking
π¬π§
5.226.140.121
9 hours ago
Wazuh Alert Evidence: Jul 27 15:10:53 pico-gw1 postfix/smtpd[2763482]: warning: hostname 5-226-140-1 ...
show more
Wazuh Alert Evidence: Jul 27 15:10:53 pico-gw1 postfix/smtpd[2763482]: warning: hostname 5-226-140-121.infrawat.ch does not resolve to address 5.226.140.121: Name or service not known
show less
Hacking
π¬π§
5.226.140.119
9 hours ago
Wazuh Alert Evidence: Jul 27 15:10:53 pico-gw1 postfix/smtpd[2763482]: warning: hostname 5-226-140-1 ...
show more
Wazuh Alert Evidence: Jul 27 15:10:53 pico-gw1 postfix/smtpd[2763482]: warning: hostname 5-226-140-119.infrawat.ch does not resolve to address 5.226.140.119: Name or service not known
show less
Hacking
π¬π§
193.176.29.10
9 hours ago
Wazuh Alert Evidence: Jul 27 15:10:36 pico-gw1 postfix/smtpd[2763482]: warning: hostname 193-176-29- ...
show more
Wazuh Alert Evidence: Jul 27 15:10:36 pico-gw1 postfix/smtpd[2763482]: warning: hostname 193-176-29-10.infrawat.ch does not resolve to address 193.176.29.10: Name or service not known
show less
Hacking
πΊπΈ
104.130.6.74
9 hours ago
Wazuh Alert Evidence: 104.130.6.74 (104.130.6.74) - - [27/Jul/2026:22:37:18 +0800] "GET /wp-login.ph ...
show more
Wazuh Alert Evidence: 104.130.6.74 (104.130.6.74) - - [27/Jul/2026:22:37:18 +0800] "GET /wp-login.php HTTP/1.1" 404 5015 "-" "Mozilla/5.0 (compatible; GoScanner/1.0)"
show less
Web App Attack
π¬π§
193.32.209.250
10 hours ago
Wazuh Alert Evidence: 193.32.209.250 (193.32.209.250) - - [27/Jul/2026:22:16:33 +0800] "GET /sse HTT ...
show more
Wazuh Alert Evidence: 193.32.209.250 (193.32.209.250) - - [27/Jul/2026:22:16:33 +0800] "GET /sse HTTP/1.1" 404 5244 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
show less
Web App Attack
π¬π§
31.14.254.125
10 hours ago
Wazuh Alert Evidence: 31.14.254.125 (31.14.254.125) - - [27/Jul/2026:22:16:31 +0800] "POST /mcp HTTP ...
show more
Wazuh Alert Evidence: 31.14.254.125 (31.14.254.125) - - [27/Jul/2026:22:16:31 +0800] "POST /mcp HTTP/1.1" 404 5244 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)"
show less
Web App Attack