๐บ๐ธ
20.163.2.35
6 minutes ago
Wazuh Alert Evidence: 20.163.2.35 - - [25/Jul/2026:23:37:56 +0000] "GET /autodiscover/autodiscover.j ...
show more
Wazuh Alert Evidence: 20.163.2.35 - - [25/Jul/2026:23:37:56 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 403 133 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐จ๐ณ
139.214.39.175
13 minutes ago
Wazuh Alert Evidence: 139.214.39.175 - - [25/Jul/2026:23:31:20 +0000] "GET http://www.msftncsi.com/n ...
show more
Wazuh Alert Evidence: 139.214.39.175 - - [25/Jul/2026:23:31:20 +0000] "GET http://www.msftncsi.com/ncsi.txt HTTP/1.1" 404 146 "http://59.120.34.133/" "Mozilla/5.0 (Windows NT 5.1; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฎ๐ฉ
210.79.191.174
22 minutes ago
Wazuh Alert Evidence: 210.79.191.174 - - [25/Jul/2026:23:21:37 +0000] "GET /.env HTTP/1.1" 403 133 " ...
show more
Wazuh Alert Evidence: 210.79.191.174 - - [25/Jul/2026:23:21:37 +0000] "GET /.env HTTP/1.1" 403 133 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:128.0) Gecko/20100101 Firefox/128.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฉ๐ช
4.184.121.217
2 hours ago
Wazuh Alert Evidence: 4.184.121.217 - - [25/Jul/2026:21:42:39 +0000] "GET /wp-content/plugins/hellop ...
show more
Wazuh Alert Evidence: 4.184.121.217 - - [25/Jul/2026:21:42:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐บ๐ธ
20.65.194.73
2 hours ago
Wazuh Alert Evidence: 20.65.194.73 - - [25/Jul/2026:21:07:10 +0000] "GET /login HTTP/1.1" 403 133 "- ...
show more
Wazuh Alert Evidence: 20.65.194.73 - - [25/Jul/2026:21:07:10 +0000] "GET /login HTTP/1.1" 403 133 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐บ๐ธ
20.65.194.160
4 hours ago
Wazuh Alert Evidence: 20.65.194.160 - - [25/Jul/2026:19:35:46 +0000] "GET / HTTP/1.1" 400 248 "-" "M ...
show more
Wazuh Alert Evidence: 20.65.194.160 - - [25/Jul/2026:19:35:46 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ณ๐ฑ
176.65.132.162
4 hours ago
Wazuh Alert Evidence: 176.65.132.162 - - [25/Jul/2026:19:31:22 +0000] "GET /.env HTTP/1.1" 404 146 " ...
show more
Wazuh Alert Evidence: 176.65.132.162 - - [25/Jul/2026:19:31:22 +0000] "GET /.env HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Linux; U; Android 3.0; en-us; Xoom Build/HRI39) AppleWebKit/525.10 (KHTML, like Gecko) Version/3.0.4 Mobile Safari/523.12.2" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐บ๐ธ
216.180.246.195
5 hours ago
Wazuh Alert Evidence: 216.180.246.195 - - [25/Jul/2026:18:13:24 +0000] "GET /manage/account/login HT ...
show more
Wazuh Alert Evidence: 216.180.246.195 - - [25/Jul/2026:18:13:24 +0000] "GET /manage/account/login HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; GenomeCrawlerd/1.0; +https://www.nokia.com/genomecrawler)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ช๐ธ
68.221.130.241
5 hours ago
Wazuh Alert Evidence: 68.221.130.241 - - [25/Jul/2026:18:09:04 +0000] "GET /wp-content/plugins/hello ...
show more
Wazuh Alert Evidence: 68.221.130.241 - - [25/Jul/2026:18:09:04 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐บ๐ธ
47.253.116.19
6 hours ago
Wazuh Alert Evidence: 47.253.116.19 - - [25/Jul/2026:16:46:05 +0000] "POST /dns-query HTTP/2.0" 403 ...
show more
Wazuh Alert Evidence: 47.253.116.19 - - [25/Jul/2026:16:46:05 +0000] "POST /dns-query HTTP/2.0" 403 162 "-" "Chrome" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฌ๐ง
31.14.254.70
8 hours ago
Wazuh Alert Evidence: Jul 25 15:24:08 ms1.triiix.info postfix/smtpd[1289553]: warning: hostname 31-1 ...
show more
Wazuh Alert Evidence: Jul 25 15:24:08 ms1.triiix.info postfix/smtpd[1289553]: warning: hostname 31-14-254-70.infrawat.ch does not resolve to address 31.14.254.70: Name or service not known
show less
Hacking
๐บ๐ธ
52.165.88.155
9 hours ago
Wazuh Alert Evidence: 52.165.88.155 - - [25/Jul/2026:14:42:11 +0000] "GET /developmentserver/metadat ...
show more
Wazuh Alert Evidence: 52.165.88.155 - - [25/Jul/2026:14:42:11 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 403 133 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐จ๐ญ
209.99.184.231
9 hours ago
Wazuh Alert Evidence: 209.99.184.231 - - [25/Jul/2026:14:36:30 +0000] "GET /package.json HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 209.99.184.231 - - [25/Jul/2026:14:36:30 +0000] "GET /package.json HTTP/1.1" 403 133 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฎ๐น
4.232.90.10
10 hours ago
Wazuh Alert Evidence: 4.232.90.10 - - [25/Jul/2026:13:19:02 +0000] "GET /wp-content/plugins/hellopre ...
show more
Wazuh Alert Evidence: 4.232.90.10 - - [25/Jul/2026:13:19:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐บ๐ธ
172.184.174.120
11 hours ago
Wazuh Alert Evidence: 172.184.174.120 - - [25/Jul/2026:12:34:14 +0000] "GET /.git/HEAD HTTP/1.1" 403 ...
show more
Wazuh Alert Evidence: 172.184.174.120 - - [25/Jul/2026:12:34:14 +0000] "GET /.git/HEAD HTTP/1.1" 403 133 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ณ๐ฑ
86.54.31.46
14 hours ago
Wazuh Alert Evidence: 86.54.31.46 - - [25/Jul/2026:09:31:40 +0000] "GET /sitemap.xml HTTP/1.1" 404 1 ...
show more
Wazuh Alert Evidence: 86.54.31.46 - - [25/Jul/2026:09:31:40 +0000] "GET /sitemap.xml HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ธ๐ฌ
68.183.227.96
14 hours ago
Wazuh Alert Evidence: 68.183.227.96 - - [25/Jul/2026:09:09:27 +0000] "GET /favicon HTTP/1.1" 404 548 ...
show more
Wazuh Alert Evidence: 68.183.227.96 - - [25/Jul/2026:09:09:27 +0000] "GET /favicon HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฌ๐ง
81.19.219.234
14 hours ago
Wazuh Alert Evidence: Jul 25 09:08:31 ms1.triiix.info postfix/smtps/smtpd[1283412]: warning: hostnam ...
show more
Wazuh Alert Evidence: Jul 25 09:08:31 ms1.triiix.info postfix/smtps/smtpd[1283412]: warning: hostname 81-19-219-234.infrawat.ch does not resolve to address 81.19.219.234: Name or service not known
show less
Hacking
๐ฌ๐ง
31.14.254.71
14 hours ago
Wazuh Alert Evidence: Jul 25 09:08:30 ms1.triiix.info postfix/smtps/smtpd[1283412]: warning: hostnam ...
show more
Wazuh Alert Evidence: Jul 25 09:08:30 ms1.triiix.info postfix/smtps/smtpd[1283412]: warning: hostname 31-14-254-71.infrawat.ch does not resolve to address 31.14.254.71: Name or service not known
show less
Hacking
๐ฌ๐ง
213.166.84.52
14 hours ago
Wazuh Alert Evidence: Jul 25 09:08:20 ms1.triiix.info postfix/smtps/smtpd[1283412]: warning: hostnam ...
show more
Wazuh Alert Evidence: Jul 25 09:08:20 ms1.triiix.info postfix/smtps/smtpd[1283412]: warning: hostname 213-166-84-52.infrawat.ch does not resolve to address 213.166.84.52: Name or service not known
show less
Hacking
๐ณ๐ด
20.100.203.84
15 hours ago
Wazuh Alert Evidence: 20.100.203.84 - - [25/Jul/2026:08:44:02 +0000] "GET /wp-content/plugins/hellop ...
show more
Wazuh Alert Evidence: 20.100.203.84 - - [25/Jul/2026:08:44:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฌ๐ง
185.216.145.188
15 hours ago
Wazuh Alert Evidence: 185.216.145.188 - - [25/Jul/2026:08:35:21 +0000] "GET /sse HTTP/1.1" 404 146 " ...
show more
Wazuh Alert Evidence: 185.216.145.188 - - [25/Jul/2026:08:35:21 +0000] "GET /sse HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฌ๐ง
81.19.219.248
15 hours ago
Wazuh Alert Evidence: 81.19.219.248 - - [25/Jul/2026:08:35:18 +0000] "POST / HTTP/1.1" 405 150 "-" " ...
show more
Wazuh Alert Evidence: 81.19.219.248 - - [25/Jul/2026:08:35:18 +0000] "POST / HTTP/1.1" 405 150 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฌ๐ง
5.226.140.70
15 hours ago
Wazuh Alert Evidence: 5.226.140.70 - - [25/Jul/2026:08:35:13 +0000] "POST /mcp HTTP/1.1" 404 146 "-" ...
show more
Wazuh Alert Evidence: 5.226.140.70 - - [25/Jul/2026:08:35:13 +0000] "POST /mcp HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack
๐ฌ๐ง
194.50.235.146
16 hours ago
Wazuh Alert Evidence: 194.50.235.146 - - [25/Jul/2026:07:16:37 +0000] "POST / HTTP/1.1" 405 166 "-" ...
show more
Wazuh Alert Evidence: 194.50.235.146 - - [25/Jul/2026:07:16:37 +0000] "POST / HTTP/1.1" 405 166 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
Web App Attack