|
๐จ๐ญ
104.244.79.113
|
|
Wazuh Alert Evidence: 104.244.79.113 - - [09/Sep/2026:05:36:02 +0000] "GET /cgi-bin/luci/ HTTP/1.1" ...
show more
Wazuh Alert Evidence: 104.244.79.113 - - [09/Sep/2026:05:36:02 +0000] "GET /cgi-bin/luci/ HTTP/1.1" 404 146 "-" "Mozilla/5.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
192.253.248.87
|
|
Wazuh Alert Evidence: Sep 09 05:09:34 ms1.triiix.info postfix/smtpd[2282331]: warning: unknown[192.2 ...
show more
Wazuh Alert Evidence: Sep 09 05:09:34 ms1.triiix.info postfix/smtpd[2282331]: warning: unknown[192.253.248.87]: SASL login authentication failed: (reason unavailable), sasl_username=help
show less
|
Brute-Force
|
|
๐บ๐ธ
216.180.246.207
|
|
Wazuh Alert Evidence: 216.180.246.207 - - [09/Sep/2026:04:57:17 +0000] "GET / HTTP/1.0" 403 146 "-" ...
show more
Wazuh Alert Evidence: 216.180.246.207 - - [09/Sep/2026:04:57:17 +0000] "GET / HTTP/1.0" 403 146 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
45.67.220.134
|
|
Wazuh Alert Evidence: 45.67.220.134 - - [09/Sep/2026:04:13:51 +0000] "GET /.well-known/farcaster.jso ...
show more
Wazuh Alert Evidence: 45.67.220.134 - - [09/Sep/2026:04:13:51 +0000] "GET /.well-known/farcaster.json HTTP/1.1" 404 133 "-" "Python/3.10 aiohttp/3.8.4" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ต๐ฑ
189.81.135.6
|
|
Wazuh Alert Evidence: 189.81.135.6 - - [09/Sep/2026:04:13:34 +0000] "GET /.well-known/farcaster.json ...
show more
Wazuh Alert Evidence: 189.81.135.6 - - [09/Sep/2026:04:13:34 +0000] "GET /.well-known/farcaster.json HTTP/1.1" 404 133 "-" "Python/3.10 aiohttp/3.8.4" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.40.254.159
|
|
Wazuh Alert Evidence: 20.40.254.159 - - [09/Sep/2026:03:48:18 +0000] "GET / HTTP/1.1" 400 248 "-" "M ...
show more
Wazuh Alert Evidence: 20.40.254.159 - - [09/Sep/2026:03:48:18 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
77.83.39.94
|
|
Wazuh Alert Evidence: 77.83.39.94 - - [09/Sep/2026:03:14:04 +0000] "GET /.git/config HTTP/1.1" 403 1 ...
show more
Wazuh Alert Evidence: 77.83.39.94 - - [09/Sep/2026:03:14:04 +0000] "GET /.git/config HTTP/1.1" 403 117 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_7; de-de) AppleWebKit/525.18 (KHTML, like Gecko) Version/3.1.1 Safari/525.20" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
52.151.198.111
|
|
Wazuh Alert Evidence: 52.151.198.111 - - [09/Sep/2026:00:57:42 +0000] "GET /autodiscover/autodiscove ...
show more
Wazuh Alert Evidence: 52.151.198.111 - - [09/Sep/2026:00:57:42 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
91.92.40.236
|
|
Wazuh Alert Evidence: 91.92.40.236 - root [09/Sep/2026:00:49:36 +0000] "POST /dvr/cmd HTTP/1.1" 404 ...
show more
Wazuh Alert Evidence: 91.92.40.236 - root [09/Sep/2026:00:49:36 +0000] "POST /dvr/cmd HTTP/1.1" 404 146 "-" "Abcd" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐จ๐ณ
103.217.186.93
|
|
Wazuh Alert Evidence: 103.217.186.93 - - [09/Sep/2026:00:12:41 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/ ...
show more
Wazuh Alert Evidence: 103.217.186.93 - - [09/Sep/2026:00:12:41 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.65.202.26
|
|
Wazuh Alert Evidence: 20.65.202.26 - - [08/Sep/2026:23:37:04 +0000] "GET /manager/html HTTP/1.1" 403 ...
show more
Wazuh Alert Evidence: 20.65.202.26 - - [08/Sep/2026:23:37:04 +0000] "GET /manager/html HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
47.251.13.59
|
|
Wazuh Alert Evidence: 47.251.13.59 - - [08/Sep/2026:23:36:07 +0000] "GET /dns-query?dns=IqwBAAABAAAA ...
show more
Wazuh Alert Evidence: 47.251.13.59 - - [08/Sep/2026:23:36:07 +0000] "GET /dns-query?dns=IqwBAAABAAAAAAAAATEEb2RucwFtCmRuc21lYXN1cmUDdG9wAAABAAE HTTP/1.1" 403 146 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.14.90.54
|
|
Wazuh Alert Evidence: 20.14.90.54 - - [08/Sep/2026:23:10:53 +0000] "GET /hudson HTTP/1.1" 403 146 "- ...
show more
Wazuh Alert Evidence: 20.14.90.54 - - [08/Sep/2026:23:10:53 +0000] "GET /hudson HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
213.209.159.47
|
|
Wazuh Alert Evidence: Sep 08 22:29:52 ms1.triiix.info postfix/smtpd[2279162]: warning: unknown[213.2 ...
show more
Wazuh Alert Evidence: Sep 08 22:29:52 ms1.triiix.info postfix/smtpd[2279162]: warning: unknown[213.209.159.47]: SASL login authentication failed: (reason unavailable), sasl_username=fax
show less
|
Brute-Force
|
|
๐ธ๐ฌ
140.245.38.115
|
|
Wazuh Alert Evidence: 140.245.38.115 - - [08/Sep/2026:21:47:58 +0000] "CONNECT ip.ifconfig.dpdns.org ...
show more
Wazuh Alert Evidence: 140.245.38.115 - - [08/Sep/2026:21:47:58 +0000] "CONNECT ip.ifconfig.dpdns.org:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
188.166.71.161
|
|
Wazuh Alert Evidence: 188.166.71.161 - - [08/Sep/2026:21:36:10 +0000] "GET / HTTP/1.1" 403 146 "-" " ...
show more
Wazuh Alert Evidence: 188.166.71.161 - - [08/Sep/2026:21:36:10 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
40.74.209.4
|
|
Wazuh Alert Evidence: 40.74.209.4 - - [08/Sep/2026:20:15:38 +0000] "GET /actuator/health HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 40.74.209.4 - - [08/Sep/2026:20:15:38 +0000] "GET /actuator/health HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
34.55.82.206
|
|
Wazuh Alert Evidence: 34.55.82.206 - - [08/Sep/2026:19:39:03 +0000] "GET /static../.env HTTP/1.1" 40 ...
show more
Wazuh Alert Evidence: 34.55.82.206 - - [08/Sep/2026:19:39:03 +0000] "GET /static../.env HTTP/1.1" 403 179 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.4958.143 Mobile Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
185.241.206.44
|
|
Wazuh Alert Evidence: 185.241.206.44 - - [08/Sep/2026:18:31:29 +0000] "GET /.env HTTP/1.1" 400 650 " ...
show more
Wazuh Alert Evidence: 185.241.206.44 - - [08/Sep/2026:18:31:29 +0000] "GET /.env HTTP/1.1" 400 650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
107.155.48.46
|
|
Wazuh Alert Evidence: 107.155.48.46 - - [08/Sep/2026:16:16:49 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 107.155.48.46 - - [08/Sep/2026:16:16:49 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ธ๐ฎ
102.220.161.87
|
|
Wazuh Alert Evidence: 102.220.161.87 - - [08/Sep/2026:15:18:43 +0000] "GET /.env HTTP/1.1" 403 117 " ...
show more
Wazuh Alert Evidence: 102.220.161.87 - - [08/Sep/2026:15:18:43 +0000] "GET /.env HTTP/1.1" 403 117 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
138.68.103.246
|
|
Wazuh Alert Evidence: 138.68.103.246 - - [08/Sep/2026:14:01:41 +0000] "GET / HTTP/1.1" 400 248 "-" " ...
show more
Wazuh Alert Evidence: 138.68.103.246 - - [08/Sep/2026:14:01:41 +0000] "GET / HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
52.167.144.147
|
|
Wazuh Alert Evidence: 52.167.144.147 - - [08/Sep/2026:13:35:47 +0000] "GET /graphql HTTP/2.0" 400 18 ...
show more
Wazuh Alert Evidence: 52.167.144.147 - - [08/Sep/2026:13:35:47 +0000] "GET /graphql HTTP/2.0" 400 18 "https://59.120.34.133/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" "-" Origin: "https://59.120.34.133" CORS_Header: "https://59.120.34.133" Sent_allow_origin: "https://59.120.34.133"
show less
|
Web App Attack
|
|
๐บ๐ธ
157.55.39.192
|
|
Wazuh Alert Evidence: 157.55.39.192 - - [08/Sep/2026:13:35:46 +0000] "POST /uc/check/login HTTP/2.0" ...
show more
Wazuh Alert Evidence: 157.55.39.192 - - [08/Sep/2026:13:35:46 +0000] "POST /uc/check/login HTTP/2.0" 403 20 "https://59.120.34.133/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" "-" Origin: "https://59.120.34.133" CORS_Header: "*" Sent_allow_origin: "*"
show less
|
Web App Attack
|
|
๐บ๐ธ
40.124.179.187
|
|
Wazuh Alert Evidence: 40.124.179.187 - - [08/Sep/2026:12:30:44 +0000] "GET /manager/html HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 40.124.179.187 - - [08/Sep/2026:12:30:44 +0000] "GET /manager/html HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|