|
πΊπΈ
45.156.129.65
|
|
Wazuh Alert Evidence: 45.156.129.65 - - [12/Sep/2026:01:58:59 +0000] "POST /mcp HTTP/1.1" 404 146 "- ...
show more
Wazuh Alert Evidence: 45.156.129.65 - - [12/Sep/2026:01:58:59 +0000] "POST /mcp HTTP/1.1" 404 146 "-" "python-httpx/0.28.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
213.209.159.20
|
|
Wazuh Alert Evidence: 213.209.159.20 - - [12/Sep/2026:01:40:53 +0000] "CONNECT api64.ipify.org:443 H ...
show more
Wazuh Alert Evidence: 213.209.159.20 - - [12/Sep/2026:01:40:53 +0000] "CONNECT api64.ipify.org:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
213.209.159.16
|
|
Wazuh Alert Evidence: 213.209.159.16 - - [12/Sep/2026:01:40:53 +0000] "CONNECT checkip.amazonaws.com ...
show more
Wazuh Alert Evidence: 213.209.159.16 - - [12/Sep/2026:01:40:53 +0000] "CONNECT checkip.amazonaws.com:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π·π΄
193.32.162.156
|
|
Wazuh Alert Evidence: 193.32.162.156 - - [12/Sep/2026:01:18:47 +0000] "GET /.svn/wc.db HTTP/1.1" 403 ...
show more
Wazuh Alert Evidence: 193.32.162.156 - - [12/Sep/2026:01:18:47 +0000] "GET /.svn/wc.db HTTP/1.1" 403 117 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.9) Gecko/20100915 Gentoo Firefox/3.6.9" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
161.35.23.112
|
|
Wazuh Alert Evidence: 161.35.23.112 - - [12/Sep/2026:00:35:08 +0000] "GET /cgi-bin/authLogin.cgi HTT ...
show more
Wazuh Alert Evidence: 161.35.23.112 - - [12/Sep/2026:00:35:08 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
139.59.142.207
|
|
Wazuh Alert Evidence: 139.59.142.207 - - [11/Sep/2026:23:26:03 +0000] "GET /cgi-bin/authLogin.cgi HT ...
show more
Wazuh Alert Evidence: 139.59.142.207 - - [11/Sep/2026:23:26:03 +0000] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
πΊπΈ
66.132.195.101
|
|
Wazuh Alert Evidence: 66.132.195.101 - - [11/Sep/2026:22:55:22 +0000] "PRI * HTTP/2.0" 400 150 "-" " ...
show more
Wazuh Alert Evidence: 66.132.195.101 - - [11/Sep/2026:22:55:22 +0000] "PRI * HTTP/2.0" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
46.101.224.24
|
|
Wazuh Alert Evidence: 46.101.224.24 - - [11/Sep/2026:22:40:06 +0000] "GET / HTTP/1.1" 400 248 "-" "M ...
show more
Wazuh Alert Evidence: 46.101.224.24 - - [11/Sep/2026:22:40:06 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
164.92.139.198
|
|
Wazuh Alert Evidence: 164.92.139.198 - - [11/Sep/2026:22:40:06 +0000] "GET /query?q=SHOW+DIAGNOSTICS ...
show more
Wazuh Alert Evidence: 164.92.139.198 - - [11/Sep/2026:22:40:06 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
206.81.20.67
|
|
Wazuh Alert Evidence: 206.81.20.67 - - [11/Sep/2026:22:40:06 +0000] "GET /solr/admin/info/system HTT ...
show more
Wazuh Alert Evidence: 206.81.20.67 - - [11/Sep/2026:22:40:06 +0000] "GET /solr/admin/info/system HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
164.92.198.136
|
|
Wazuh Alert Evidence: 164.92.198.136 - - [11/Sep/2026:22:39:57 +0000] "GET / HTTP/1.0" 403 146 "-" " ...
show more
Wazuh Alert Evidence: 164.92.198.136 - - [11/Sep/2026:22:39:57 +0000] "GET / HTTP/1.0" 403 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
161.35.199.243
|
|
Wazuh Alert Evidence: 161.35.199.243 - - [11/Sep/2026:22:34:59 +0000] "POST / HTTP/1.1" 405 166 "-" ...
show more
Wazuh Alert Evidence: 161.35.199.243 - - [11/Sep/2026:22:34:59 +0000] "POST / HTTP/1.1" 405 166 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
139.59.144.220
|
|
Wazuh Alert Evidence: 139.59.144.220 - - [11/Sep/2026:22:34:58 +0000] "GET /query?q=SHOW+DIAGNOSTICS ...
show more
Wazuh Alert Evidence: 139.59.144.220 - - [11/Sep/2026:22:34:58 +0000] "GET /query?q=SHOW+DIAGNOSTICS HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
164.90.173.183
|
|
Wazuh Alert Evidence: 164.90.173.183 - - [11/Sep/2026:22:34:58 +0000] "GET / HTTP/1.1" 400 248 "-" " ...
show more
Wazuh Alert Evidence: 164.90.173.183 - - [11/Sep/2026:22:34:58 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
164.92.199.84
|
|
Wazuh Alert Evidence: 164.92.199.84 - - [11/Sep/2026:22:34:51 +0000] "GET / HTTP/1.0" 403 146 "-" "- ...
show more
Wazuh Alert Evidence: 164.92.199.84 - - [11/Sep/2026:22:34:51 +0000] "GET / HTTP/1.0" 403 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
212.227.80.115
|
|
Wazuh Alert Evidence: 212.227.80.115 - - [11/Sep/2026:22:11:31 +0000] "POST / HTTP/1.1" 400 552 "-" ...
show more
Wazuh Alert Evidence: 212.227.80.115 - - [11/Sep/2026:22:11:31 +0000] "POST / HTTP/1.1" 400 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
πΊπΈ
40.124.122.62
|
|
Wazuh Alert Evidence: 40.124.122.62 - - [11/Sep/2026:21:45:11 +0000] "GET / HTTP/1.1" 403 117 "-" "M ...
show more
Wazuh Alert Evidence: 40.124.122.62 - - [11/Sep/2026:21:45:11 +0000] "GET / HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π·π΄
193.32.162.154
|
|
Wazuh Alert Evidence: 193.32.162.154 - - [11/Sep/2026:21:01:07 +0000] "GET /.git/config HTTP/1.1" 40 ...
show more
Wazuh Alert Evidence: 193.32.162.154 - - [11/Sep/2026:21:01:07 +0000] "GET /.git/config HTTP/1.1" 403 179 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/101.0.4951.64 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π¬π§
5.226.140.6
|
|
Wazuh Alert Evidence: 5.226.140.6 - - [11/Sep/2026:20:42:57 +0000] "POST /onvif/device_service HTTP/ ...
show more
Wazuh Alert Evidence: 5.226.140.6 - - [11/Sep/2026:20:42:57 +0000] "POST /onvif/device_service HTTP/1.1" 400 248 "-" "Go-http-client/1.1" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
129.159.8.251
|
|
Wazuh Alert Evidence: 129.159.8.251 - - [11/Sep/2026:19:32:32 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 129.159.8.251 - - [11/Sep/2026:19:32:32 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
213.209.159.175
|
|
Wazuh Alert Evidence: 213.209.159.175 - - [11/Sep/2026:19:11:47 +0000] "GET /.env HTTP/1.1" 403 146 ...
show more
Wazuh Alert Evidence: 213.209.159.175 - - [11/Sep/2026:19:11:47 +0000] "GET /.env HTTP/1.1" 403 146 "-" "Mozilla/5.0 (Linux; U; Android 4.1.2; en-us; USCC-US780 Build/JZO54K) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π³π±
185.226.197.22
|
|
Wazuh Alert Evidence: 185.226.197.22 - - [11/Sep/2026:18:53:02 +0000] "GET /swagger.json HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 185.226.197.22 - - [11/Sep/2026:18:53:02 +0000] "GET /swagger.json HTTP/1.1" 404 548 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π§π·
205.210.31.223
|
|
Wazuh Alert Evidence: 205.210.31.223 - - [11/Sep/2026:18:47:09 +0000] "GET / HTTP/1.0" 403 146 "-" " ...
show more
Wazuh Alert Evidence: 205.210.31.223 - - [11/Sep/2026:18:47:09 +0000] "GET / HTTP/1.0" 403 146 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
πΏπ¦
34.35.117.159
|
|
Wazuh Alert Evidence: 34.35.117.159 - - [11/Sep/2026:18:31:54 +0000] "POST / HTTP/1.1" 403 179 "-" " ...
show more
Wazuh Alert Evidence: 34.35.117.159 - - [11/Sep/2026:18:31:54 +0000] "POST / HTTP/1.1" 403 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
π©πͺ
165.154.138.79
|
|
Wazuh Alert Evidence: 165.154.138.79 - - [11/Sep/2026:17:16:38 +0000] "GET /config.json HTTP/1.1" 40 ...
show more
Wazuh Alert Evidence: 165.154.138.79 - - [11/Sep/2026:17:16:38 +0000] "GET /config.json HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|