|
๐บ๐ธ
74.82.47.5
|
|
Wazuh Alert Evidence: 74.82.47.5 - - [21/Oct/2026:00:11:02 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozill ...
show more
Wazuh Alert Evidence: 74.82.47.5 - - [21/Oct/2026:00:11:02 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
64.62.156.66
|
|
Wazuh Alert Evidence: 64.62.156.66 - - [21/Oct/2026:00:03:40 +0000] "GET /webui/ HTTP/1.1" 404 162 " ...
show more
Wazuh Alert Evidence: 64.62.156.66 - - [21/Oct/2026:00:03:40 +0000] "GET /webui/ HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/110.0" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
74.7.175.155
|
|
Wazuh Alert Evidence: 2026/10/20 23:57:12 [error] 155278#155278: *15498 access forbidden by rule, cl ...
show more
Wazuh Alert Evidence: 2026/10/20 23:57:12 [error] 155278#155278: *15498 access forbidden by rule, client: 74.7.175.155, server: ms1.bitstreetx.info, request: "GET /robots.txt HTTP/2.0", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐ฉ๐ช
130.12.180.168
|
|
Wazuh Alert Evidence: 2026/10/20 22:46:42 [error] 155278#155278: *15467 access forbidden by rule, cl ...
show more
Wazuh Alert Evidence: 2026/10/20 22:46:42 [error] 155278#155278: *15467 access forbidden by rule, client: 130.12.180.168, server: ms1.bitstreetx.info, request: "GET /444 HTTP/1.1", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐ฉ๐ช
130.12.180.166
|
|
Wazuh Alert Evidence: 2026/10/20 22:45:08 [error] 155278#155278: *15466 access forbidden by rule, cl ...
show more
Wazuh Alert Evidence: 2026/10/20 22:45:08 [error] 155278#155278: *15466 access forbidden by rule, client: 130.12.180.166, server: ms1.bitstreetx.info, request: "GET /444 HTTP/1.1", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐ฉ๐ช
130.12.180.176
|
|
Wazuh Alert Evidence: 2026/10/20 22:44:36 [error] 155278#155278: *15465 access forbidden by rule, cl ...
show more
Wazuh Alert Evidence: 2026/10/20 22:44:36 [error] 155278#155278: *15465 access forbidden by rule, client: 130.12.180.176, server: ms1.bitstreetx.info, request: "GET /444 HTTP/1.1", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐ฉ๐ช
130.12.180.175
|
|
Wazuh Alert Evidence: 2026/10/20 22:44:04 [error] 155278#155278: *15464 [client 130.12.180.175] ModS ...
show more
Wazuh Alert Evidence: 2026/10/20 22:44:04 [error] 155278#155278: *15464 [client 130.12.180.175] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:ANOMALY_SCORE' (Value: `5' ) [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "81"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "2"] [ver "OWASP_CRS/3.3.5"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.168.102.88"] [uri "/.env"] [unique_id "179253624449.789994"] [ref ""], client: 130.12.180.175, server: ms1.bitstreetx.info, request: "GET /.env HTTP/1.1", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐ง๐ท
170.247.4.216
|
|
Wazuh Alert Evidence: 170.247.4.216 - - [20/Oct/2026:22:27:12 +0000] "GET / HTTP/1.0" 403 162 "-" "m ...
show more
Wazuh Alert Evidence: 170.247.4.216 - - [20/Oct/2026:22:27:12 +0000] "GET / HTTP/1.0" 403 162 "-" "masscan/1.0 (https://github.com/robertdavidgraham/masscan)" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
107.150.97.180
|
|
Wazuh Alert Evidence: 107.150.97.180 - - [20/Oct/2026:22:20:15 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 107.150.97.180 - - [20/Oct/2026:22:20:15 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.3.1 Safari/605.1.15" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
172.93.215.8
|
|
Wazuh Alert Evidence: 172.93.215.8 - - [20/Oct/2026:21:29:33 +0000] "GET /.env HTTP/1.1" 444 0 "-" " ...
show more
Wazuh Alert Evidence: 172.93.215.8 - - [20/Oct/2026:21:29:33 +0000] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.108 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
5.188.86.234
|
|
Wazuh Alert Evidence: 5.188.86.234 - - [20/Oct/2026:21:21:28 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 5.188.86.234 - - [20/Oct/2026:21:21:28 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
45.132.186.198
|
|
Wazuh Alert Evidence: 2026/10/20 21:10:42 [error] 155278#155278: *15443 access forbidden by rule, cl ...
show more
Wazuh Alert Evidence: 2026/10/20 21:10:42 [error] 155278#155278: *15443 access forbidden by rule, client: 45.132.186.198, server: ms1.bitstreetx.info, request: "GET / HTTP/1.1", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐จ๐ณ
106.75.28.140
|
|
Wazuh Alert Evidence: 106.75.28.140 - - [20/Oct/2026:20:37:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 106.75.28.140 - - [20/Oct/2026:20:37:47 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 9_0_2) AppleWebKit/565.50 (KHTML, like Gecko) Chrome/78.0.297 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฎ๐ณ
159.65.148.158
|
|
Wazuh Alert Evidence: 159.65.148.158 - - [20/Oct/2026:19:32:45 +0000] "GET / HTTP/2.0" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 159.65.148.158 - - [20/Oct/2026:19:32:45 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ต๐ฑ
45.138.12.10
|
|
Wazuh Alert Evidence: 45.138.12.10 - - [20/Oct/2026:19:20:01 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 45.138.12.10 - - [20/Oct/2026:19:20:01 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
45.59.104.47
|
|
Wazuh Alert Evidence: Oct 20 19:12:59 ms1.bitstreetx.info postfix/smtpd[60614]: NOQUEUE: reject: RCP ...
show more
Wazuh Alert Evidence: Oct 20 19:12:59 ms1.bitstreetx.info postfix/smtpd[60614]: NOQUEUE: reject: RCPT from unknown[45.59.104.47]: 550 5.7.25 Client host rejected: cannot find your hostname, [45.59.104.47]; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<[45.59.104.47]>
show less
|
Hacking
|
|
๐บ๐ธ
71.6.134.237
|
|
Wazuh Alert Evidence: 71.6.134.237 - - [20/Oct/2026:19:09:03 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 71.6.134.237 - - [20/Oct/2026:19:09:03 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฏ๐ต
118.194.228.239
|
|
Wazuh Alert Evidence: Oct 20 18:52:37 ms1.bitstreetx.info postfix/smtpd[53899]: warning: unknown[118 ...
show more
Wazuh Alert Evidence: Oct 20 18:52:37 ms1.bitstreetx.info postfix/smtpd[53899]: warning: unknown[118.194.228.239]: SASL NTLM authentication failed: Invalid authentication mechanism, sasl_username=(unavailable)
show less
|
Brute-Force
|
|
๐บ๐ธ
44.220.188.148
|
|
Wazuh Alert Evidence: Oct 20 18:37:07 ms1.bitstreetx.info postfix/smtpd[48779]: warning: scanner-44- ...
show more
Wazuh Alert Evidence: Oct 20 18:37:07 ms1.bitstreetx.info postfix/smtpd[48779]: warning: scanner-44-220-188-148.reposify.net[44.220.188.148]: SASL NTLM authentication failed: Invalid authentication mechanism, sasl_username=(unavailable)
show less
|
Brute-Force
|
|
๐ซ๐ฎ
147.185.133.219
|
|
Wazuh Alert Evidence: 147.185.133.219 - - [20/Oct/2026:17:49:35 +0000] "GET / HTTP/1.1" 444 0 "-" "H ...
show more
Wazuh Alert Evidence: 147.185.133.219 - - [20/Oct/2026:17:49:35 +0000] "GET / HTTP/1.1" 444 0 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.156.87.86
|
|
Wazuh Alert Evidence: 45.156.87.86 - - [20/Oct/2026:17:44:54 +0000] "GET / HTTP/1.1" 403 162 "-" "Mo ...
show more
Wazuh Alert Evidence: 45.156.87.86 - - [20/Oct/2026:17:44:54 +0000] "GET / HTTP/1.1" 403 162 "-" "Mozilla/5.0 (X11; Ubuntu; Linux aarch64; rv:90.0) Gecko/20100101 Firefox/90.0" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
151.245.151.63
|
|
Wazuh Alert Evidence: 151.245.151.63 - - [20/Oct/2026:17:34:32 +0000] "GET / HTTP/2.0" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 151.245.151.63 - - [20/Oct/2026:17:34:32 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; ForestEngine/1.0; +https://forestengine.net/)" "-"
show less
|
Web App Attack
|
|
๐ฐ๐ท
118.193.69.177
|
|
Wazuh Alert Evidence: 118.193.69.177 - - [20/Oct/2026:17:13:54 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 118.193.69.177 - - [20/Oct/2026:17:13:54 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
138.68.171.81
|
|
Wazuh Alert Evidence: 138.68.171.81 - - [20/Oct/2026:17:05:55 +0000] "GET /.git/config HTTP/1.1" 403 ...
show more
Wazuh Alert Evidence: 138.68.171.81 - - [20/Oct/2026:17:05:55 +0000] "GET /.git/config HTTP/1.1" 403 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
188.166.154.168
|
|
Wazuh Alert Evidence: 188.166.154.168 - - [20/Oct/2026:16:51:20 +0000] "GET / HTTP/1.1" 444 0 "-" "C ...
show more
Wazuh Alert Evidence: 188.166.154.168 - - [20/Oct/2026:16:51:20 +0000] "GET / HTTP/1.1" 444 0 "-" "CGrab/v8.24.1-dev-throughput" "-"
show less
|
Web App Attack
|