Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 2.26.123.50
2.26.123.50 - - [14/May/2026:22:46:01 +0000] "GET /cmd HTTP/1.1" 403 1844 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 46 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.169.193
sshd[33902]: Failed password for invalid user jenkins from 144.31.169.193 port 52607 ssh2
Count: 5 events in 195s | 15/May/2026:01:41:19 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 31.76.245.68
31.76.245.68 - - [16/May/2026:15:44:16 +0000] "GET /server-status HTTP/1.1" 400 1724 "-" "python-requests/2.32.3"
Count: 14 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.148.110
sshd[51525]: Failed password for invalid user teamspeak from 144.31.148.110 port 39315 ssh2
Count: 39 events in 585s | 14/May/2026:05:07:56 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 2.26.123.105
2.26.123.105 - - [16/May/2026:11:22:20 +0000] "GET /server-status HTTP/1.1" 400 926 "-" "python-requests/2.32.3"
Count: 42 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.214
sshd[44403]: Failed password for invalid user www-data from 2.26.122.214 port 46561 ssh2
Count: 19 events in 359s | 16/May/2026:00:22:57 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 95.85.251.112
sshd[26635]: Failed password for invalid user test from 95.85.251.112 port 37903 ssh2
Count: 36 events in 392s | 14/May/2026:14:43:32 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.148.221
sshd[52349]: Failed password for invalid user pi from 144.31.148.221 port 33806 ssh2
Count: 65 events in 227s | 15/May/2026:04:08:08 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.142
sshd[14263]: Failed password for invalid user nagios from 144.31.223.142 port 43049 ssh2
Count: 57 events in 92s | 16/May/2026:23:57:38 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.169.186
144.31.169.186 - - [14/May/2026:00:41:25 +0000] "GET /exchange/autodiscover HTTP/1.1" 403 5008 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 12 events
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 31.76.244.29
sshd[1555]: Failed password for invalid user git from 31.76.244.29 port 63366 ssh2
Count: 16 events in 228s | 14/May/2026:12:44:28 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.224
sshd[48552]: Failed password for invalid user bitbucket from 2.26.122.224 port 38500 ssh2
Count: 24 events in 380s | 15/May/2026:18:58:08 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.33
sshd[35917]: Failed password for invalid user git from 144.31.223.33 port 61871 ssh2
Count: 70 events in 114s | 14/May/2026:07:11:13 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.53.68
sshd[56408]: Failed password for invalid user docker from 144.31.53.68 port 59055 ssh2
Count: 7 events in 414s | 15/May/2026:17:46:54 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.57
sshd[58439]: Failed password for invalid user ansible from 144.31.238.57 port 51919 ssh2
Count: 29 events in 346s | 16/May/2026:04:54:23 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.148.137
sshd[60945]: Failed password for invalid user test from 144.31.148.137 port 61070 ssh2
Count: 31 events in 299s | 14/May/2026:10:44:07 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.53.122
sshd[24108]: Failed password for invalid user support from 144.31.53.122 port 53158 ssh2
Count: 9 events in 457s | 15/May/2026:11:05:07 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 2.26.122.111
sshd[16150]: Failed password for invalid user deploy from 2.26.122.111 port 63536 ssh2
Count: 52 events in 523s | 14/May/2026:06:13:19 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.223.165
sshd[24837]: Failed password for invalid user www-data from 144.31.223.165 port 37517 ssh2
Count: 75 events in 165s | 16/May/2026:12:27:27 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.169.45
sshd[8096]: Failed password for invalid user svn from 144.31.169.45 port 61622 ssh2
Count: 91 events in 321s | 14/May/2026:03:08:22 +0000
show less
Wazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | s ...
show moreWazuh Alert [Rule 5763 Level 10] - "SSHD brute force trying to get access"
agent: server-prod-01 | src_ip: 144.31.238.234
sshd[22783]: Failed password for invalid user redis from 144.31.238.234 port 61944 ssh2
Count: 48 events in 284s | 14/May/2026:03:07:58 +0000
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 144.31.148.167
144.31.148.167 - - [16/May/2026:17:28:56 +0000] "GET /wp-content/debug.log HTTP/1.1" 404 4063 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
Count: 25 events
show less
Wazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 ...
show moreWazuh Alert [Rule 31151 Level 7] - "Multiple web server errors from same source"
agent: webserver-02 | src_ip: 95.85.251.108
95.85.251.108 - - [16/May/2026:15:45:37 +0000] "GET /wp-config.php.bak HTTP/1.1" 404 7560 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
Count: 50 events
show less
Web App Attack
By clicking “Accept all”, you agree to the storing of cookies on your device to remember preferences and
analyze site usage.
Read more
- Required to log into your AbuseIPDB account, and store these cookie preferences.