|
๐ฏ๐ต
189.81.237.49
|
|
Wazuh Alert Evidence: 189.81.237.49 - - [27/Sep/2026:03:07:35 +0000] "GET / HTTP/2.0" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 189.81.237.49 - - [27/Sep/2026:03:07:35 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
159.223.142.57
|
|
Wazuh Alert Evidence: 159.223.142.57 - - [27/Sep/2026:02:44:46 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 159.223.142.57 - - [27/Sep/2026:02:44:46 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0" "-"
show less
|
Web App Attack
|
|
๐จ๐ญ
185.231.33.46
|
|
Wazuh Alert Evidence: 185.231.33.46 - - [27/Sep/2026:02:04:21 +0000] "GET /remote/info HTTP/1.1" 444 ...
show more
Wazuh Alert Evidence: 185.231.33.46 - - [27/Sep/2026:02:04:21 +0000] "GET /remote/info HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; V1.2040.0)" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
40.124.179.246
|
|
Wazuh Alert Evidence: 40.124.179.246 - - [27/Sep/2026:01:32:55 +0000] "GET /actuator/health HTTP/1.1 ...
show more
Wazuh Alert Evidence: 40.124.179.246 - - [27/Sep/2026:01:32:55 +0000] "GET /actuator/health HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
213.209.159.223
|
|
Wazuh Alert Evidence: 213.209.159.223 - - [27/Sep/2026:01:31:12 +0000] "GET /8xlc6x3h8c8pog HTTP/1.1 ...
show more
Wazuh Alert Evidence: 213.209.159.223 - - [27/Sep/2026:01:31:12 +0000] "GET /8xlc6x3h8c8pog HTTP/1.1" 404 162 "-" "Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.8.1.13) Gecko/20080313 Iceape/1.1.9 (Debian-1.1.9-5)" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
31.14.254.54
|
|
Wazuh Alert Evidence: 31.14.254.54 - - [27/Sep/2026:00:46:13 +0000] "GET /sse HTTP/1.1" 404 162 "-" ...
show more
Wazuh Alert Evidence: 31.14.254.54 - - [27/Sep/2026:00:46:13 +0000] "GET /sse HTTP/1.1" 404 162 "-" "Mozilla/5.0" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
213.166.84.44
|
|
Wazuh Alert Evidence: 213.166.84.44 - - [27/Sep/2026:00:46:10 +0000] "GET /mcp HTTP/1.1" 404 162 "-" ...
show more
Wazuh Alert Evidence: 213.166.84.44 - - [27/Sep/2026:00:46:10 +0000] "GET /mcp HTTP/1.1" 404 162 "-" "Mozilla/5.0" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
193.32.209.235
|
|
Wazuh Alert Evidence: 193.32.209.235 - - [27/Sep/2026:00:46:10 +0000] "GET /api/mcp HTTP/1.1" 404 16 ...
show more
Wazuh Alert Evidence: 193.32.209.235 - - [27/Sep/2026:00:46:10 +0000] "GET /api/mcp HTTP/1.1" 404 162 "-" "Mozilla/5.0" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
195.206.182.202
|
|
Wazuh Alert Evidence: 195.206.182.202 - - [27/Sep/2026:00:46:09 +0000] "GET /mcp/ HTTP/1.1" 404 162 ...
show more
Wazuh Alert Evidence: 195.206.182.202 - - [27/Sep/2026:00:46:09 +0000] "GET /mcp/ HTTP/1.1" 404 162 "-" "Mozilla/5.0" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
142.93.124.119
|
|
Wazuh Alert Evidence: 142.93.124.119 - - [27/Sep/2026:00:39:28 +0000] "SSTP_DUPLEX_POST /sra_{BA1959 ...
show more
Wazuh Alert Evidence: 142.93.124.119 - - [27/Sep/2026:00:39:28 +0000] "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 400 166 "-" "-" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
172.208.65.31
|
|
Wazuh Alert Evidence: 172.208.65.31 - - [27/Sep/2026:00:28:18 +0000] "GET /version HTTP/1.1" 444 0 " ...
show more
Wazuh Alert Evidence: 172.208.65.31 - - [27/Sep/2026:00:28:18 +0000] "GET /version HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ซ๐ท
169.40.142.8
|
|
Wazuh Alert Evidence: 169.40.142.8 - - [26/Sep/2026:23:50:09 +0000] "GET /api/session/properties HTT ...
show more
Wazuh Alert Evidence: 169.40.142.8 - - [26/Sep/2026:23:50:09 +0000] "GET /api/session/properties HTTP/1.1" 404 162 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" "243.67.71.70"
show less
|
Web App Attack
|
|
๐บ๐ธ
47.77.217.213
|
|
Wazuh Alert Evidence: 47.77.217.213 - - [26/Sep/2026:23:41:53 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 47.77.217.213 - - [26/Sep/2026:23:41:53 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
159.89.42.156
|
|
Wazuh Alert Evidence: 159.89.42.156 - - [26/Sep/2026:23:29:30 +0000] "HEAD /backup/ HTTP/1.1" 404 0 ...
show more
Wazuh Alert Evidence: 159.89.42.156 - - [26/Sep/2026:23:29:30 +0000] "HEAD /backup/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.29.41.210
|
|
Wazuh Alert Evidence: 20.29.41.210 - - [26/Sep/2026:23:24:10 +0000] "GET /portal/redlion HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 20.29.41.210 - - [26/Sep/2026:23:24:10 +0000] "GET /portal/redlion HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
217.60.237.240
|
|
Wazuh Alert Evidence: 217.60.237.240 - - [26/Sep/2026:23:17:40 +0000] "GET http://azenv.net/ HTTP/1. ...
show more
Wazuh Alert Evidence: 217.60.237.240 - - [26/Sep/2026:23:17:40 +0000] "GET http://azenv.net/ HTTP/1.1" 400 264 "-" "zmap-proxy-probe/1.0" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.74.28.47
|
|
Wazuh Alert Evidence: 45.74.28.47 - - [26/Sep/2026:23:07:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozil ...
show more
Wazuh Alert Evidence: 45.74.28.47 - - [26/Sep/2026:23:07:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
show less
|
Web App Attack
|
|
๐ง๐ช
34.34.177.236
|
|
Wazuh Alert Evidence: 34.34.177.236 - - [26/Sep/2026:22:54:15 +0000] "GET / HTTP/1.1" 444 0 "-" "pyt ...
show more
Wazuh Alert Evidence: 34.34.177.236 - - [26/Sep/2026:22:54:15 +0000] "GET / HTTP/1.1" 444 0 "-" "python-requests/2.34.2" "-"
show less
|
Web App Attack
|
|
๐ฐ๐ท
20.194.97.74
|
|
Wazuh Alert Evidence: 20.194.97.74 - - [26/Sep/2026:22:48:12 +0000] "GET /wp-content/plugins/hellopr ...
show more
Wazuh Alert Evidence: 20.194.97.74 - - [26/Sep/2026:22:48:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" "-"
show less
|
Web App Attack
|
|
๐ฏ๐ต
203.25.124.183
|
|
Wazuh Alert Evidence: 203.25.124.183 - - [26/Sep/2026:22:47:31 +0000] "GET /onvif-http/snapshot HTTP ...
show more
Wazuh Alert Evidence: 203.25.124.183 - - [26/Sep/2026:22:47:31 +0000] "GET /onvif-http/snapshot HTTP/1.1" 404 162 "-" "node" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
152.32.235.180
|
|
Wazuh Alert Evidence: 152.32.235.180 - - [26/Sep/2026:22:25:07 +0000] "GET /.env HTTP/1.1" 403 564 " ...
show more
Wazuh Alert Evidence: 152.32.235.180 - - [26/Sep/2026:22:25:07 +0000] "GET /.env HTTP/1.1" 403 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฉ๐ช
206.189.57.162
|
|
Wazuh Alert Evidence: 206.189.57.162 - - [26/Sep/2026:22:19:38 +0000] "GET / HTTP/1.1" 403 162 "-" " ...
show more
Wazuh Alert Evidence: 206.189.57.162 - - [26/Sep/2026:22:19:38 +0000] "GET / HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ฎ๐น
34.17.199.190
|
|
Wazuh Alert Evidence: 34.17.199.190 - - [26/Sep/2026:22:17:00 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 34.17.199.190 - - [26/Sep/2026:22:17:00 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฏ๐ต
216.226.78.10
|
|
Wazuh Alert Evidence: 216.226.78.10 - - [26/Sep/2026:22:01:19 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 216.226.78.10 - - [26/Sep/2026:22:01:19 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
147.185.132.173
|
|
Wazuh Alert Evidence: 147.185.132.173 - - [26/Sep/2026:21:46:44 +0000] "GET / HTTP/1.1" 444 0 "-" "c ...
show more
Wazuh Alert Evidence: 147.185.132.173 - - [26/Sep/2026:21:46:44 +0000] "GET / HTTP/1.1" 444 0 "-" "curl/7.68.0" "-"
show less
|
Web App Attack
|