|
๐บ๐ธ
34.96.52.27
|
|
Wazuh Alert Evidence: 34.96.52.27 - - [20/Oct/2026:14:27:27 +0000] "GET /v2/_catalog HTTP/2.0" 404 1 ...
show more
Wazuh Alert Evidence: 34.96.52.27 - - [20/Oct/2026:14:27:27 +0000] "GET /v2/_catalog HTTP/2.0" 404 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
34.34.253.129
|
|
Wazuh Alert Evidence: 34.34.253.129 - - [20/Oct/2026:14:27:24 +0000] "GET /v2/_catalog HTTP/2.0" 404 ...
show more
Wazuh Alert Evidence: 34.34.253.129 - - [20/Oct/2026:14:27:24 +0000] "GET /v2/_catalog HTTP/2.0" 404 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
34.34.253.168
|
|
Wazuh Alert Evidence: 34.34.253.168 - - [20/Oct/2026:14:25:16 +0000] "POST /uc/check/login HTTP/2.0" ...
show more
Wazuh Alert Evidence: 34.34.253.168 - - [20/Oct/2026:14:25:16 +0000] "POST /uc/check/login HTTP/2.0" 403 20 "https://registry.triiix.io/v2/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" Origin: "https://registry.triiix.io" CORS_Header: "*" Sent_allow_origin: "*"
show less
|
Web App Attack
|
|
๐บ๐ธ
34.34.253.74
|
|
Wazuh Alert Evidence: 34.34.253.74 - - [20/Oct/2026:14:25:11 +0000] "POST /uc/check/login HTTP/2.0" ...
show more
Wazuh Alert Evidence: 34.34.253.74 - - [20/Oct/2026:14:25:11 +0000] "POST /uc/check/login HTTP/2.0" 403 20 "https://registry.triiix.io/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" Origin: "https://registry.triiix.io" CORS_Header: "*" Sent_allow_origin: "*"
show less
|
Web App Attack
|
|
๐ฉ๐ช
158.94.208.198
|
|
Wazuh Alert Evidence: 158.94.208.198 - - [20/Oct/2026:14:15:23 +0000] "GET http://127.0.0.1:8199/aze ...
show more
Wazuh Alert Evidence: 158.94.208.198 - - [20/Oct/2026:14:15:23 +0000] "GET http://127.0.0.1:8199/azenv HTTP/1.1" 400 248 "-" "Mozilla/5.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฐ๐ท
43.108.13.119
|
|
Wazuh Alert Evidence: Oct 20 14:09:19 ms1.triiix.info postfix/submission/smtpd[604948]: NOQUEUE: rej ...
show more
Wazuh Alert Evidence: Oct 20 14:09:19 ms1.triiix.info postfix/submission/smtpd[604948]: NOQUEUE: reject: RCPT from unknown[43.108.13.119]: 554 5.7.1 <unknown[43.108.13.119]>: Client host rejected: Access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<fscan.test>
show less
|
Hacking
|
|
๐ฐ๐ท
43.108.13.119
|
|
Wazuh Alert Evidence: 43.108.13.119 - - [20/Oct/2026:13:50:58 +0000] "GET / HTTP/1.1" 403 133 "-" "M ...
show more
Wazuh Alert Evidence: 43.108.13.119 - - [20/Oct/2026:13:50:58 +0000] "GET / HTTP/1.1" 403 133 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Mobile/15E148 Safari/604.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ฎ๐ฉ
129.227.46.187
|
|
Wazuh Alert Evidence: 129.227.46.187 - - [20/Oct/2026:13:24:14 +0000] "POST /uc/check/login HTTP/2.0 ...
show more
Wazuh Alert Evidence: 129.227.46.187 - - [20/Oct/2026:13:24:14 +0000] "POST /uc/check/login HTTP/2.0" 403 20 "https://59.120.34.133/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/155.0.0.0 Safari/537.36" "-" Origin: "https://59.120.34.133" CORS_Header: "*" Sent_allow_origin: "*"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
77.67.26.244
|
|
Wazuh Alert Evidence: 77.67.26.244 - - [20/Oct/2026:13:07:19 +0000] "GET /sse HTTP/1.1" 404 146 "-" ...
show more
Wazuh Alert Evidence: 77.67.26.244 - - [20/Oct/2026:13:07:19 +0000] "GET /sse HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
200.138.46.217
|
|
Wazuh Alert Evidence: 200.138.46.217 - - [20/Oct/2026:13:07:18 +0000] "GET /mcp/ HTTP/1.1" 404 146 " ...
show more
Wazuh Alert Evidence: 200.138.46.217 - - [20/Oct/2026:13:07:18 +0000] "GET /mcp/ HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
86.38.187.156
|
|
Wazuh Alert Evidence: 86.38.187.156 - - [20/Oct/2026:13:07:18 +0000] "GET /api/mcp HTTP/1.1" 404 146 ...
show more
Wazuh Alert Evidence: 86.38.187.156 - - [20/Oct/2026:13:07:18 +0000] "GET /api/mcp HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
77.67.26.236
|
|
Wazuh Alert Evidence: 77.67.26.236 - - [20/Oct/2026:13:07:18 +0000] "GET /mcp HTTP/1.1" 404 146 "-" ...
show more
Wazuh Alert Evidence: 77.67.26.236 - - [20/Oct/2026:13:07:18 +0000] "GET /mcp HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ง๐ท
170.247.4.216
|
|
Wazuh Alert Evidence: 170.247.4.216 - - [20/Oct/2026:12:39:57 +0000] "GET / HTTP/1.0" 403 146 "-" "m ...
show more
Wazuh Alert Evidence: 170.247.4.216 - - [20/Oct/2026:12:39:57 +0000] "GET / HTTP/1.0" 403 146 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
172.212.227.97
|
|
Wazuh Alert Evidence: 172.212.227.97 - - [20/Oct/2026:12:30:23 +0000] "GET /developmentserver/metada ...
show more
Wazuh Alert Evidence: 172.212.227.97 - - [20/Oct/2026:12:30:23 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
162.35.28.121
|
|
Wazuh Alert Evidence: 162.35.28.121 - - [20/Oct/2026:12:07:36 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 162.35.28.121 - - [20/Oct/2026:12:07:36 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
165.227.195.248
|
|
Wazuh Alert Evidence: 165.227.195.248 - - [20/Oct/2026:11:36:45 +0000] "GET / HTTP/2.0" 403 106 "-" ...
show more
Wazuh Alert Evidence: 165.227.195.248 - - [20/Oct/2026:11:36:45 +0000] "GET / HTTP/2.0" 403 106 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
66.132.172.210
|
|
Wazuh Alert Evidence: 66.132.172.210 - - [20/Oct/2026:10:57:47 +0000] "PRI * HTTP/2.0" 400 150 "-" " ...
show more
Wazuh Alert Evidence: 66.132.172.210 - - [20/Oct/2026:10:57:47 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.106.200.208
|
|
Wazuh Alert Evidence: 20.106.200.208 - - [20/Oct/2026:10:38:12 +0000] "GET / HTTP/1.1" 403 146 "-" " ...
show more
Wazuh Alert Evidence: 20.106.200.208 - - [20/Oct/2026:10:38:12 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ธ๐ฌ
5.223.58.112
|
|
Wazuh Alert Evidence: 5.223.58.112 - - [20/Oct/2026:09:47:48 +0000] "GET / HTTP/1.1" 403 146 "-" "Mo ...
show more
Wazuh Alert Evidence: 5.223.58.112 - - [20/Oct/2026:09:47:48 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
46.151.178.14
|
|
Wazuh Alert Evidence: 46.151.178.14 - - [20/Oct/2026:09:33:19 +0000] "GET /autodiscover/autodiscover ...
show more
Wazuh Alert Evidence: 46.151.178.14 - - [20/Oct/2026:09:33:19 +0000] "GET /autodiscover/autodiscover.xml HTTP/1.1" 404 146 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.15.203.58
|
|
Wazuh Alert Evidence: 20.15.203.58 - - [20/Oct/2026:09:32:40 +0000] "GET / HTTP/1.1" 400 248 "-" "Mo ...
show more
Wazuh Alert Evidence: 20.15.203.58 - - [20/Oct/2026:09:32:40 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
52.165.83.60
|
|
Wazuh Alert Evidence: 52.165.83.60 - - [20/Oct/2026:09:25:21 +0000] "GET / HTTP/1.1" 403 117 "-" "Mo ...
show more
Wazuh Alert Evidence: 52.165.83.60 - - [20/Oct/2026:09:25:21 +0000] "GET / HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
66.240.236.116
|
|
Wazuh Alert Evidence: 66.240.236.116 - - [20/Oct/2026:08:47:35 +0000] "GET / HTTP/1.1" 403 146 "-" " ...
show more
Wazuh Alert Evidence: 66.240.236.116 - - [20/Oct/2026:08:47:35 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
157.245.84.42
|
|
Wazuh Alert Evidence: 157.245.84.42 - - [20/Oct/2026:08:01:41 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 157.245.84.42 - - [20/Oct/2026:08:01:41 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
24.199.85.56
|
|
Wazuh Alert Evidence: 24.199.85.56 - - [20/Oct/2026:07:52:33 +0000] "GET / HTTP/1.1" 403 146 "-" "Mo ...
show more
Wazuh Alert Evidence: 24.199.85.56 - - [20/Oct/2026:07:52:33 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|