|
🇺🇸
20.80.111.73
|
|
Wazuh Alert Evidence: 20.80.111.73 - - [09/Oct/2026:12:59:59 +0000] "GET /developmentserver/metadata ...
show more
Wazuh Alert Evidence: 20.80.111.73 - - [09/Oct/2026:12:59:59 +0000] "GET /developmentserver/metadatauploader HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
20.51.188.38
|
|
Wazuh Alert Evidence: 20.51.188.38 - - [09/Oct/2026:11:41:29 +0000] "GET / HTTP/1.1" 403 146 "-" "Mo ...
show more
Wazuh Alert Evidence: 20.51.188.38 - - [09/Oct/2026:11:41:29 +0000] "GET / HTTP/1.1" 403 146 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇳🇱
91.92.241.213
|
|
Wazuh Alert Evidence: Oct 09 11:19:07 ms1.triiix.info postfix/smtpd[3354867]: warning: unknown[91.92 ...
show more
Wazuh Alert Evidence: Oct 09 11:19:07 ms1.triiix.info postfix/smtpd[3354867]: warning: unknown[91.92.241.213]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=test123
show less
|
Brute-Force
|
|
🇲🇽
158.23.176.177
|
|
Wazuh Alert Evidence: 158.23.176.177 - - [09/Oct/2026:10:10:40 +0000] "GET /wp-content/plugins/hello ...
show more
Wazuh Alert Evidence: 158.23.176.177 - - [09/Oct/2026:10:10:40 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇲🇾
14.192.192.225
|
|
Wazuh Alert Evidence: 14.192.192.225 - - [09/Oct/2026:09:56:54 +0000] "POST /graphql HTTP/2.0" 502 5 ...
show more
Wazuh Alert Evidence: 14.192.192.225 - - [09/Oct/2026:09:56:54 +0000] "POST /graphql HTTP/2.0" 502 552 "https://www.triiix.io/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" Origin: "https://www.triiix.io" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇲🇾
161.142.123.28
|
|
Wazuh Alert Evidence: 2026/10/09 09:41:42 [error] 2484855#2484855: *384 connect() failed (111: Conne ...
show more
Wazuh Alert Evidence: 2026/10/09 09:41:42 [error] 2484855#2484855: *384 connect() failed (111: Connection refused) while connecting to upstream, client: 161.142.123.28, server: strapii.triiix.io, request: "POST /graphql HTTP/2.0", upstream: "http://192.168.106.9:1337/graphql", host: "strapii.triiix.io", referrer: "https://www.triiix.io/"
show less
|
Web App Attack
|
|
🇺🇸
192.178.16.102
|
|
Wazuh Alert Evidence: 192.178.16.102 - - [09/Oct/2026:08:49:59 +0000] "POST /graphql HTTP/1.1" 502 1 ...
show more
Wazuh Alert Evidence: 192.178.16.102 - - [09/Oct/2026:08:49:59 +0000] "POST /graphql HTTP/1.1" 502 150 "https://www.triiix.io/" "PlayStore-Google" "-" Origin: "https://www.triiix.io" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇨🇦
45.198.224.230
|
|
Wazuh Alert Evidence: 45.198.224.230 - - [09/Oct/2026:08:37:30 +0000] "CONNECT 1.1.1.1:443 HTTP/1.1" ...
show more
Wazuh Alert Evidence: 45.198.224.230 - - [09/Oct/2026:08:37:30 +0000] "CONNECT 1.1.1.1:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
20.119.76.17
|
|
Wazuh Alert Evidence: 20.119.76.17 - - [09/Oct/2026:08:07:51 +0000] "GET /autodiscover/autodiscover. ...
show more
Wazuh Alert Evidence: 20.119.76.17 - - [09/Oct/2026:08:07:51 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇨🇦
45.198.224.232
|
|
Wazuh Alert Evidence: 45.198.224.232 - - [09/Oct/2026:08:02:20 +0000] "CONNECT 1.1.1.1:443 HTTP/1.1" ...
show more
Wazuh Alert Evidence: 45.198.224.232 - - [09/Oct/2026:08:02:20 +0000] "CONNECT 1.1.1.1:443 HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
40.76.96.137
|
|
Wazuh Alert Evidence: 40.76.96.137 - - [09/Oct/2026:07:56:56 +0000] "GET /login HTTP/1.1" 403 117 "- ...
show more
Wazuh Alert Evidence: 40.76.96.137 - - [09/Oct/2026:07:56:56 +0000] "GET /login HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
20.150.194.143
|
|
Wazuh Alert Evidence: 20.150.194.143 - - [09/Oct/2026:07:40:36 +0000] "POST /mcp HTTP/1.1" 403 117 " ...
show more
Wazuh Alert Evidence: 20.150.194.143 - - [09/Oct/2026:07:40:36 +0000] "POST /mcp HTTP/1.1" 403 117 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
156.229.21.54
|
|
Wazuh Alert Evidence: 156.229.21.54 - - [09/Oct/2026:05:33:27 +0000] "GET /sitemap.xml HTTP/1.1" 404 ...
show more
Wazuh Alert Evidence: 156.229.21.54 - - [09/Oct/2026:05:33:27 +0000] "GET /sitemap.xml HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇩🇪
104.248.130.34
|
|
Wazuh Alert Evidence: 104.248.130.34 - - [09/Oct/2026:05:28:07 +0000] "GET / HTTP/1.1" 400 248 "-" " ...
show more
Wazuh Alert Evidence: 104.248.130.34 - - [09/Oct/2026:05:28:07 +0000] "GET / HTTP/1.1" 400 248 "-" "Mozilla/5.0 zgrab/0.x" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇧🇪
34.79.236.98
|
|
Wazuh Alert Evidence: 34.79.236.98 - - [09/Oct/2026:05:09:16 +0000] "OPTIONS / HTTP/1.1" 405 166 "-" ...
show more
Wazuh Alert Evidence: 34.79.236.98 - - [09/Oct/2026:05:09:16 +0000] "OPTIONS / HTTP/1.1" 405 166 "-" "Mozilla/5.0 (compatible)" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇳🇱
178.16.54.254
|
|
Wazuh Alert Evidence: Oct 09 03:57:30 ms1.triiix.info postfix/smtpd[3200566]: NOQUEUE: reject: RCPT ...
show more
Wazuh Alert Evidence: Oct 09 03:57:30 ms1.triiix.info postfix/smtpd[3200566]: NOQUEUE: reject: RCPT from unknown[178.16.54.254]: 554 5.7.1 Service unavailable; Client host [178.16.54.254] blocked using zen.spamhaus.org; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<178-16-54-254>
show less
|
Hacking
|
|
🇧🇷
190.111.110.13
|
|
Wazuh Alert Evidence: 190.111.110.13 - - [09/Oct/2026:03:54:37 +0000] "GET /admin/config.php HTTP/1. ...
show more
Wazuh Alert Evidence: 190.111.110.13 - - [09/Oct/2026:03:54:37 +0000] "GET /admin/config.php HTTP/1.0" 403 146 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇳🇱
45.156.128.177
|
|
Wazuh Alert Evidence: 45.156.128.177 - - [09/Oct/2026:03:54:22 +0000] "GET /Telerik.Web.UI.WebResour ...
show more
Wazuh Alert Evidence: 45.156.128.177 - - [09/Oct/2026:03:54:22 +0000] "GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1" 403 195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.86 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
65.49.1.152
|
|
Wazuh Alert Evidence: 65.49.1.152 - - [09/Oct/2026:02:32:11 +0000] "GET /webui/ HTTP/1.1" 404 548 "- ...
show more
Wazuh Alert Evidence: 65.49.1.152 - - [09/Oct/2026:02:32:11 +0000] "GET /webui/ HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.132 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇨🇦
149.56.150.12
|
|
Wazuh Alert Evidence: 2026/10/09 02:31:56 [error] 2429914#2429914: *101152 connect() failed (111: Co ...
show more
Wazuh Alert Evidence: 2026/10/09 02:31:56 [error] 2429914#2429914: *101152 connect() failed (111: Connection refused) while connecting to upstream, client: 149.56.150.12, server: strapii.triiix.io, request: "POST /graphql HTTP/2.0", upstream: "http://192.168.106.9:1337/graphql", host: "strapii.triiix.io", referrer: "https://www.triiix.io/"
show less
|
Web App Attack
|
|
🇲🇾
14.192.192.225
|
|
Wazuh Alert Evidence: 2026/10/09 01:44:45 [error] 2429914#2429914: *101066 connect() failed (111: Co ...
show more
Wazuh Alert Evidence: 2026/10/09 01:44:45 [error] 2429914#2429914: *101066 connect() failed (111: Connection refused) while connecting to upstream, client: 14.192.192.225, server: strapii.triiix.io, request: "POST /graphql HTTP/2.0", upstream: "http://192.168.106.9:1337/graphql", host: "strapii.triiix.io", referrer: "https://www.triiix.io/"
show less
|
Web App Attack
|
|
🇺🇸
47.253.33.35
|
|
Wazuh Alert Evidence: Oct 09 01:31:29 ms1.triiix.info postfix/submission/smtpd[3151821]: warning: un ...
show more
Wazuh Alert Evidence: Oct 09 01:31:29 ms1.triiix.info postfix/submission/smtpd[3151821]: warning: unknown[47.253.33.35]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=user
show less
|
Brute-Force
|
|
🇨🇭
209.99.185.60
|
|
Wazuh Alert Evidence: 209.99.185.60 - - [08/Oct/2026:23:26:20 +0000] "GET / HTTP/1.1" 403 195 "-" "M ...
show more
Wazuh Alert Evidence: 209.99.185.60 - - [08/Oct/2026:23:26:20 +0000] "GET / HTTP/1.1" 403 195 "-" "Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇺🇸
147.185.132.118
|
|
Wazuh Alert Evidence: 147.185.132.118 - - [08/Oct/2026:23:20:41 +0000] "GET / HTTP/1.0" 403 146 "-" ...
show more
Wazuh Alert Evidence: 147.185.132.118 - - [08/Oct/2026:23:20:41 +0000] "GET / HTTP/1.0" 403 146 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|
|
🇩🇪
45.149.204.139
|
|
Wazuh Alert Evidence: 45.149.204.139 - - [08/Oct/2026:23:02:36 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/ ...
show more
Wazuh Alert Evidence: 45.149.204.139 - - [08/Oct/2026:23:02:36 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-"
show less
|
Web App Attack
|