|
๐ธ๐ฌ
43.163.86.65
|
|
Wazuh Alert Evidence: 2026/10/31 00:37:09 [error] 2751517#2751517: *7548 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/31 00:37:09 [error] 2751517#2751517: *7548 access forbidden by rule, client: 43.163.86.65, server: localhost, request: "GET / HTTP/1.1", host: "59.120.34.133:80"
show less
|
Web App Attack
|
|
๐ง๐ฌ
91.92.109.43
|
|
Wazuh Alert Evidence: 2026/10/30 23:56:17 [error] 2751517#2751517: *7525 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 23:56:17 [error] 2751517#2751517: *7525 access forbidden by rule, client: 91.92.109.43, server: localhost, request: "GET / HTTP/1.1", host: "api.ipify.org"
show less
|
Web App Attack
|
|
๐ฉ๐ช
185.220.101.105
|
|
Wazuh Alert Evidence: 2026/10/30 23:55:55 [error] 2751517#2751517: *7523 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 23:55:55 [error] 2751517#2751517: *7523 access forbidden by rule, client: 185.220.101.105, server: localhost, request: "GET / HTTP/1.1", host: "api.ipify.org"
show less
|
Web App Attack
|
|
๐บ๐ธ
204.8.96.163
|
|
Wazuh Alert Evidence: 2026/10/30 23:55:32 [error] 2751517#2751517: *7521 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 23:55:32 [error] 2751517#2751517: *7521 access forbidden by rule, client: 204.8.96.163, server: localhost, request: "GET / HTTP/1.1", host: "api.ipify.org"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.66.35.13
|
|
Wazuh Alert Evidence: 2026/10/30 23:55:10 [error] 2751517#2751517: *7519 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 23:55:10 [error] 2751517#2751517: *7519 access forbidden by rule, client: 45.66.35.13, server: localhost, request: "GET / HTTP/1.1", host: "api.ipify.org"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.169.85.19
|
|
Wazuh Alert Evidence: 2026/10/30 23:43:14 [error] 2751517#2751517: *7510 [client 20.169.85.19] ModSe ...
show more
Wazuh Alert Evidence: 2026/10/30 23:43:14 [error] 2751517#2751517: *7510 [client 20.169.85.19] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `8' ) [file "/etc/nginx/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "192.168.102.83"] [uri "/"] [unique_id "179340379451.008012"] [ref ""], client: 20.169.85.19, server: localhost, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ฉ๐ช
85.155.14.16
|
|
Wazuh Alert Evidence: 2026/10/30 23:36:59 [error] 2751517#2751517: *7508 [client 85.155.14.16] ModSe ...
show more
Wazuh Alert Evidence: 2026/10/30 23:36:59 [error] 2751517#2751517: *7508 [client 85.155.14.16] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `8' ) [file "/etc/nginx/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "192.168.102.83"] [uri "/.aws/credentials"] [unique_id "179340341984.559768"] [ref ""], client: 85.155.14.16, server: devcoiiinxagent.triiix.io, request: "GET /.aws/credentials HTTP/1.1", host: "59.120.34.133:443"
show less
|
Web App Attack
|
|
๐ง๐ท
168.196.55.9
|
|
Wazuh Alert Evidence: 2026/10/30 22:46:07 [error] 2751517#2751517: *7490 [client 168.196.55.9] ModSe ...
show more
Wazuh Alert Evidence: 2026/10/30 22:46:07 [error] 2751517#2751517: *7490 [client 168.196.55.9] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `15' ) [file "/etc/nginx/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "192.168.102.83"] [uri "/admin/config.php"] [unique_id "179340036751.044143"] [ref ""], client: 168.196.55.9, server: localhost, request: "GET /admin/config.php HTTP/1.0"
show less
|
Web App Attack
|
|
๐บ๐ธ
40.124.172.29
|
|
Wazuh Alert Evidence: 2026/10/30 22:36:33 [error] 2751517#2751517: *7486 [client 40.124.172.29] ModS ...
show more
Wazuh Alert Evidence: 2026/10/30 22:36:33 [error] 2751517#2751517: *7486 [client 40.124.172.29] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `8' ) [file "/etc/nginx/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "192.168.102.83"] [uri "/"] [unique_id "179339979379.827464"] [ref ""], client: 40.124.172.29, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
194.187.178.18
|
|
Wazuh Alert Evidence: 2026/10/30 22:25:38 [error] 2751517#2751517: *7482 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 22:25:38 [error] 2751517#2751517: *7482 access forbidden by rule, client: 194.187.178.18, server: devcoiiinxagent.triiix.io, request: "GET /444 HTTP/1.1", host: "59.120.34.133:443"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
194.187.178.82
|
|
Wazuh Alert Evidence: 2026/10/30 22:25:38 [error] 2751517#2751517: *7483 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 22:25:38 [error] 2751517#2751517: *7483 access forbidden by rule, client: 194.187.178.82, server: devcoiiinxagent.triiix.io, request: "GET /444 HTTP/1.1", host: "59.120.34.133:443"
show less
|
Web App Attack
|
|
๐ฌ๐ง
161.35.167.168
|
|
Wazuh Alert Evidence: 2026/10/30 22:18:09 [error] 2751517#2751517: *7477 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 22:18:09 [error] 2751517#2751517: *7477 access forbidden by rule, client: 161.35.167.168, server: localhost, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ฏ๐ต
43.165.170.119
|
|
Wazuh Alert Evidence: 2026/10/30 19:55:33 [error] 2751517#2751517: *7283 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 19:55:33 [error] 2751517#2751517: *7283 access forbidden by rule, client: 43.165.170.119, server: localhost, request: "GET /444 HTTP/1.1", host: "59.120.34.133", referrer: "http://59.120.34.133"
show less
|
Web App Attack
|
|
๐ซ๐ท
212.47.78.233
|
|
Wazuh Alert Evidence: 212.47.78.233 - - [30/Oct/2026:18:54:41 +0000] "POST /index.php?-d+allow_url_i ...
show more
Wazuh Alert Evidence: 212.47.78.233 - - [30/Oct/2026:18:54:41 +0000] "POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1" 302 138 "-" "libredtail-http" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
๐ง๐ช
198.235.24.150
|
|
Wazuh Alert Evidence: 2026/10/30 18:01:52 [error] 2751517#2751517: *7225 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 18:01:52 [error] 2751517#2751517: *7225 access forbidden by rule, client: 198.235.24.150, server: localhost, request: "GET / HTTP/1.1", host: "strapii.triiix.io"
show less
|
Web App Attack
|
|
๐ซ๐ฎ
147.185.133.240
|
|
Wazuh Alert Evidence: 2026/10/30 17:17:21 [error] 2751517#2751517: *7206 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 17:17:21 [error] 2751517#2751517: *7206 access forbidden by rule, client: 147.185.133.240, server: localhost, request: "GET /444 HTTP/1.1", host: "59.120.34.133:80", referrer: "http://59.120.34.133:80/"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
206.189.99.238
|
|
Wazuh Alert Evidence: 2026/10/30 17:03:39 [error] 2751517#2751517: *7192 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 17:03:39 [error] 2751517#2751517: *7192 access forbidden by rule, client: 206.189.99.238, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.156.128.93
|
|
Wazuh Alert Evidence: 2026/10/30 16:57:47 [error] 2751517#2751517: *7189 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:57:47 [error] 2751517#2751517: *7189 access forbidden by rule, client: 45.156.128.93, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ฌ๐ง
87.236.176.151
|
|
Wazuh Alert Evidence: 2026/10/30 16:43:45 [error] 2751517#2751517: *7163 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:43:45 [error] 2751517#2751517: *7163 access forbidden by rule, client: 87.236.176.151, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133:443"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
46.151.178.15
|
|
Wazuh Alert Evidence: 2026/10/30 16:42:13 [error] 2751517#2751517: *7149 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:42:13 [error] 2751517#2751517: *7149 access forbidden by rule, client: 46.151.178.15, server: devcoiiinxagent.triiix.io, request: "HEAD / HTTP/1.1", host: "59.120.34.133:443"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
185.242.226.98
|
|
Wazuh Alert Evidence: 2026/10/30 16:36:21 [error] 2751517#2751517: *7144 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:36:21 [error] 2751517#2751517: *7144 access forbidden by rule, client: 185.242.226.98, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ฏ๐ต
43.165.167.72
|
|
Wazuh Alert Evidence: 2026/10/30 16:25:54 [error] 2751517#2751517: *7135 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:25:54 [error] 2751517#2751517: *7135 access forbidden by rule, client: 43.165.167.72, server: localhost, request: "GET /444 HTTP/1.1", host: "59.120.34.133:80", referrer: "http://59.120.34.133:80"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
103.203.56.1
|
|
Wazuh Alert Evidence: 2026/10/30 16:21:14 [error] 2751517#2751517: *7131 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:21:14 [error] 2751517#2751517: *7131 access forbidden by rule, client: 103.203.56.1, server: localhost, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ง๐ช
35.210.207.250
|
|
Wazuh Alert Evidence: 2026/10/30 16:15:42 [error] 2751517#2751517: *7116 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:15:42 [error] 2751517#2751517: *7116 access forbidden by rule, client: 35.210.207.250, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133"
show less
|
Web App Attack
|
|
๐ง๐ช
35.210.201.136
|
|
Wazuh Alert Evidence: 2026/10/30 16:15:40 [error] 2751517#2751517: *7115 access forbidden by rule, c ...
show more
Wazuh Alert Evidence: 2026/10/30 16:15:40 [error] 2751517#2751517: *7115 access forbidden by rule, client: 35.210.201.136, server: devcoiiinxagent.triiix.io, request: "GET / HTTP/1.1", host: "59.120.34.133:443"
show less
|
Web App Attack
|