|
๐บ๐ธ
173.255.221.189
|
|
Wazuh Alert Evidence: 173.255.221.189 - - [19/Sep/2026:02:37:51 +0000] "GET / HTTP/1.1" 403 162 "-" ...
show more
Wazuh Alert Evidence: 173.255.221.189 - - [19/Sep/2026:02:37:51 +0000] "GET / HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
172.104.210.105
|
|
Wazuh Alert Evidence: 172.104.210.105 - - [19/Sep/2026:02:37:49 +0000] "GET / HTTP/1.1" 400 264 "-" ...
show more
Wazuh Alert Evidence: 172.104.210.105 - - [19/Sep/2026:02:37:49 +0000] "GET / HTTP/1.1" 400 264 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
23.137.104.145
|
|
Wazuh Alert Evidence: 23.137.104.145 - - [19/Sep/2026:02:20:39 +0000] "GET /filefuns.php HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 23.137.104.145 - - [19/Sep/2026:02:20:39 +0000] "GET /filefuns.php HTTP/1.1" 404 564 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ง๐ช
34.22.222.15
|
|
Wazuh Alert Evidence: 34.22.222.15 - - [19/Sep/2026:02:18:55 +0000] "GET / HTTP/1.1" 444 0 "-" "pyth ...
show more
Wazuh Alert Evidence: 34.22.222.15 - - [19/Sep/2026:02:18:55 +0000] "GET / HTTP/1.1" 444 0 "-" "python-requests/2.34.2" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
154.54.100.179
|
|
Wazuh Alert Evidence: 2026/09/19 01:42:12 [error] 745459#745459: *59266 [client 154.54.100.179] ModS ...
show more
Wazuh Alert Evidence: 2026/09/19 01:42:12 [error] 745459#745459: *59266 [client 154.54.100.179] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:ANOMALY_SCORE' (Value: `10' ) [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "81"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [data ""] [severity "2"] [ver "OWASP_CRS/3.3.5"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.168.102.88"] [uri "/.git/config"] [unique_id "178978213233.615148"] [ref ""], client: 154.54.100.179, server: ms1.bitstreetx.info, request: "GET /.git/config HTTP/1.1", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐บ๐ธ
45.33.80.243
|
|
Wazuh Alert Evidence: 45.33.80.243 - - [19/Sep/2026:01:35:30 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 45.33.80.243 - - [19/Sep/2026:01:35:30 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
172.94.9.193
|
|
Wazuh Alert Evidence: Sep 19 01:01:15 ms2.bitstreetx.info auth[187031]: pam_unix(dovecot:auth): auth ...
show more
Wazuh Alert Evidence: Sep 19 01:01:15 ms2.bitstreetx.info auth[187031]: pam_unix(dovecot:auth): authentication failure; logname= uid=1001 euid=1001 tty=dovecot ruser=info rhost=172.94.9.193
show less
|
Brute-Force
|
|
๐ฌ๐ง
167.71.133.68
|
|
Wazuh Alert Evidence: 167.71.133.68 - - [19/Sep/2026:00:59:29 +0000] "GET / HTTP/1.1" 403 162 "-" "M ...
show more
Wazuh Alert Evidence: 167.71.133.68 - - [19/Sep/2026:00:59:29 +0000] "GET / HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ฎ๐ณ
64.227.150.28
|
|
Wazuh Alert Evidence: 64.227.150.28 - - [19/Sep/2026:00:45:22 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 64.227.150.28 - - [19/Sep/2026:00:45:22 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.148.10.9
|
|
Wazuh Alert Evidence: 45.148.10.9 - - [19/Sep/2026:00:38:13 +0000] "POST /?rest_route=/batch/v1 HTTP ...
show more
Wazuh Alert Evidence: 45.148.10.9 - - [19/Sep/2026:00:38:13 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
8.231.138.98
|
|
Wazuh Alert Evidence: 8.231.138.98 - - [19/Sep/2026:00:30:28 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 8.231.138.98 - - [19/Sep/2026:00:30:28 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
167.94.146.55
|
|
Wazuh Alert Evidence: 167.94.146.55 - - [19/Sep/2026:00:28:11 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 167.94.146.55 - - [19/Sep/2026:00:28:11 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
213.177.179.24
|
|
Wazuh Alert Evidence: Sep 19 00:21:47 ms2.bitstreetx.info auth[186623]: pam_unix(dovecot:auth): auth ...
show more
Wazuh Alert Evidence: Sep 19 00:21:47 ms2.bitstreetx.info auth[186623]: pam_unix(dovecot:auth): authentication failure; logname= uid=1001 euid=1001 tty=dovecot ruser=booking rhost=213.177.179.24
show less
|
Brute-Force
|
|
๐ฏ๐ต
203.25.124.189
|
|
Wazuh Alert Evidence: 203.25.124.189 - - [19/Sep/2026:00:02:54 +0000] "GET /onvif-http/snapshot HTTP ...
show more
Wazuh Alert Evidence: 203.25.124.189 - - [19/Sep/2026:00:02:54 +0000] "GET /onvif-http/snapshot HTTP/1.1" 404 162 "-" "node" "-"
show less
|
Web App Attack
|
|
๐ฏ๐ต
212.32.76.57
|
|
Wazuh Alert Evidence: 212.32.76.57 - - [19/Sep/2026:00:02:54 +0000] "GET /login.cgi HTTP/1.1" 404 16 ...
show more
Wazuh Alert Evidence: 212.32.76.57 - - [19/Sep/2026:00:02:54 +0000] "GET /login.cgi HTTP/1.1" 404 162 "-" "node" "-"
show less
|
Web App Attack
|
|
๐ฐ๐ท
61.110.23.54
|
|
Wazuh Alert Evidence: 61.110.23.54 - - [19/Sep/2026:00:01:19 +0000] "GET / HTTP/1.0" 444 0 "-" "-" " ...
show more
Wazuh Alert Evidence: 61.110.23.54 - - [19/Sep/2026:00:01:19 +0000] "GET / HTTP/1.0" 444 0 "-" "-" "-"
show less
|
Web App Attack
|
|
๐ฏ๐ต
164.52.24.185
|
|
Wazuh Alert Evidence: 164.52.24.185 - - [18/Sep/2026:23:54:18 +0000] "GET /v1/models HTTP/1.1" 404 5 ...
show more
Wazuh Alert Evidence: 164.52.24.185 - - [18/Sep/2026:23:54:18 +0000] "GET /v1/models HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
52.146.20.92
|
|
Wazuh Alert Evidence: 52.146.20.92 - - [18/Sep/2026:23:50:56 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 52.146.20.92 - - [18/Sep/2026:23:50:56 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
40.124.186.144
|
|
Wazuh Alert Evidence: 40.124.186.144 - - [18/Sep/2026:23:08:40 +0000] "GET /ReportServer HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 40.124.186.144 - - [18/Sep/2026:23:08:40 +0000] "GET /ReportServer HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ท๐ด
92.118.39.58
|
|
Wazuh Alert Evidence: Sep 18 22:57:16 ms2.bitstreetx.info auth[186108]: pam_unix(dovecot:auth): auth ...
show more
Wazuh Alert Evidence: Sep 18 22:57:16 ms2.bitstreetx.info auth[186108]: pam_unix(dovecot:auth): authentication failure; logname= uid=1001 euid=1001 tty=dovecot ruser=hrd rhost=92.118.39.58
show less
|
Brute-Force
|
|
๐ฉ๐ช
213.209.159.17
|
|
Wazuh Alert Evidence: 213.209.159.17 - - [18/Sep/2026:22:31:11 +0000] "CONNECT checkip.amazonaws.com ...
show more
Wazuh Alert Evidence: 213.209.159.17 - - [18/Sep/2026:22:31:11 +0000] "CONNECT checkip.amazonaws.com:443 HTTP/1.1" 400 166 "-" "-" "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
213.209.159.21
|
|
Wazuh Alert Evidence: 213.209.159.21 - - [18/Sep/2026:22:31:03 +0000] "CONNECT api64.ipify.org:443 H ...
show more
Wazuh Alert Evidence: 213.209.159.21 - - [18/Sep/2026:22:31:03 +0000] "CONNECT api64.ipify.org:443 HTTP/1.1" 400 166 "-" "-" "-"
show less
|
Web App Attack
|
|
๐ซ๐ท
207.180.210.142
|
|
Wazuh Alert Evidence: 207.180.210.142 - - [18/Sep/2026:22:14:19 +0000] "POST /xmlrpc/2/common HTTP/1 ...
show more
Wazuh Alert Evidence: 207.180.210.142 - - [18/Sep/2026:22:14:19 +0000] "POST /xmlrpc/2/common HTTP/1.1" 400 264 "-" "Mozilla/5.0" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
185.218.86.24
|
|
Wazuh Alert Evidence: 185.218.86.24 - - [18/Sep/2026:22:07:25 +0000] "GET /.git/config HTTP/1.1" 444 ...
show more
Wazuh Alert Evidence: 185.218.86.24 - - [18/Sep/2026:22:07:25 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X 10_10_3 rv:2.0; so-DJ) AppleWebKit/533.15.6 (KHTML, like Gecko) Version/4.0.2 Safari/533.15.6" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.65.146.0
|
|
Wazuh Alert Evidence: 20.65.146.0 - - [18/Sep/2026:22:06:26 +0000] "GET /version HTTP/1.1" 444 0 "-" ...
show more
Wazuh Alert Evidence: 20.65.146.0 - - [18/Sep/2026:22:06:26 +0000] "GET /version HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|