๐ซ๐ท
169.40.142.8
26 Sep 2026
Wazuh Alert Evidence: 169.40.142.8 - - [26/Sep/2026:23:50:09 +0000] "GET /api/session/properties HTT ...
show more
Wazuh Alert Evidence: 169.40.142.8 - - [26/Sep/2026:23:50:09 +0000] "GET /api/session/properties HTTP/1.1" 404 162 "-" "metabase-cve-2026-72898-detect/1.0 (benign detection probes only)" "243.67.71.70"
show less
Web App Attack
๐บ๐ธ
47.77.217.213
26 Sep 2026
Wazuh Alert Evidence: 47.77.217.213 - - [26/Sep/2026:23:41:53 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/. ...
show more
Wazuh Alert Evidence: 47.77.217.213 - - [26/Sep/2026:23:41:53 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" "-"
show less
Web App Attack
๐บ๐ธ
159.89.42.156
26 Sep 2026
Wazuh Alert Evidence: 159.89.42.156 - - [26/Sep/2026:23:29:30 +0000] "HEAD /backup/ HTTP/1.1" 404 0 ...
show more
Wazuh Alert Evidence: 159.89.42.156 - - [26/Sep/2026:23:29:30 +0000] "HEAD /backup/ HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" "-"
show less
Web App Attack
๐บ๐ธ
20.29.41.210
26 Sep 2026
Wazuh Alert Evidence: 20.29.41.210 - - [26/Sep/2026:23:24:10 +0000] "GET /portal/redlion HTTP/1.1" 4 ...
show more
Wazuh Alert Evidence: 20.29.41.210 - - [26/Sep/2026:23:24:10 +0000] "GET /portal/redlion HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Web App Attack
๐ณ๐ฑ
217.60.237.240
26 Sep 2026
Wazuh Alert Evidence: 217.60.237.240 - - [26/Sep/2026:23:17:40 +0000] "GET http://azenv.net/ HTTP/1. ...
show more
Wazuh Alert Evidence: 217.60.237.240 - - [26/Sep/2026:23:17:40 +0000] "GET http://azenv.net/ HTTP/1.1" 400 264 "-" "zmap-proxy-probe/1.0" "-"
show less
Web App Attack
๐ณ๐ฑ
45.74.28.47
26 Sep 2026
Wazuh Alert Evidence: 45.74.28.47 - - [26/Sep/2026:23:07:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozil ...
show more
Wazuh Alert Evidence: 45.74.28.47 - - [26/Sep/2026:23:07:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
show less
Web App Attack
๐ง๐ช
34.34.177.236
26 Sep 2026
Wazuh Alert Evidence: 34.34.177.236 - - [26/Sep/2026:22:54:15 +0000] "GET / HTTP/1.1" 444 0 "-" "pyt ...
show more
Wazuh Alert Evidence: 34.34.177.236 - - [26/Sep/2026:22:54:15 +0000] "GET / HTTP/1.1" 444 0 "-" "python-requests/2.34.2" "-"
show less
Web App Attack
๐ฐ๐ท
20.194.97.74
26 Sep 2026
Wazuh Alert Evidence: 20.194.97.74 - - [26/Sep/2026:22:48:12 +0000] "GET /wp-content/plugins/hellopr ...
show more
Wazuh Alert Evidence: 20.194.97.74 - - [26/Sep/2026:22:48:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" "-"
show less
Web App Attack
๐ฏ๐ต
203.25.124.183
26 Sep 2026
Wazuh Alert Evidence: 203.25.124.183 - - [26/Sep/2026:22:47:31 +0000] "GET /onvif-http/snapshot HTTP ...
show more
Wazuh Alert Evidence: 203.25.124.183 - - [26/Sep/2026:22:47:31 +0000] "GET /onvif-http/snapshot HTTP/1.1" 404 162 "-" "node" "-"
show less
Web App Attack
๐บ๐ธ
152.32.235.180
26 Sep 2026
Wazuh Alert Evidence: 152.32.235.180 - - [26/Sep/2026:22:25:07 +0000] "GET /.env HTTP/1.1" 403 564 " ...
show more
Wazuh Alert Evidence: 152.32.235.180 - - [26/Sep/2026:22:25:07 +0000] "GET /.env HTTP/1.1" 403 564 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "-"
show less
Web App Attack
๐ฉ๐ช
206.189.57.162
26 Sep 2026
Wazuh Alert Evidence: 206.189.57.162 - - [26/Sep/2026:22:19:38 +0000] "GET / HTTP/1.1" 403 162 "-" " ...
show more
Wazuh Alert Evidence: 206.189.57.162 - - [26/Sep/2026:22:19:38 +0000] "GET / HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Web App Attack
๐ฎ๐น
34.17.199.190
26 Sep 2026
Wazuh Alert Evidence: 34.17.199.190 - - [26/Sep/2026:22:17:00 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 34.17.199.190 - - [26/Sep/2026:22:17:00 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.80 Safari/537.36" "-"
show less
Web App Attack
๐ฏ๐ต
216.226.78.10
26 Sep 2026
Wazuh Alert Evidence: 216.226.78.10 - - [26/Sep/2026:22:01:19 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 216.226.78.10 - - [26/Sep/2026:22:01:19 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐บ๐ธ
147.185.132.173
26 Sep 2026
Wazuh Alert Evidence: 147.185.132.173 - - [26/Sep/2026:21:46:44 +0000] "GET / HTTP/1.1" 444 0 "-" "c ...
show more
Wazuh Alert Evidence: 147.185.132.173 - - [26/Sep/2026:21:46:44 +0000] "GET / HTTP/1.1" 444 0 "-" "curl/7.68.0" "-"
show less
Web App Attack
๐ฆ๐บ
20.213.164.196
26 Sep 2026
Wazuh Alert Evidence: 20.213.164.196 - - [26/Sep/2026:21:37:52 +0000] "GET /wp-content/plugins/hello ...
show more
Wazuh Alert Evidence: 20.213.164.196 - - [26/Sep/2026:21:37:52 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" "-"
show less
Web App Attack
๐บ๐ธ
135.233.97.69
26 Sep 2026
Wazuh Alert Evidence: 135.233.97.69 - - [26/Sep/2026:21:33:36 +0000] "GET /druid/index.html HTTP/1.1 ...
show more
Wazuh Alert Evidence: 135.233.97.69 - - [26/Sep/2026:21:33:36 +0000] "GET /druid/index.html HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Web App Attack
๐บ๐ธ
20.12.244.17
26 Sep 2026
Wazuh Alert Evidence: 20.12.244.17 - - [26/Sep/2026:20:55:05 +0000] "GET /autodiscover/autodiscover. ...
show more
Wazuh Alert Evidence: 20.12.244.17 - - [26/Sep/2026:20:55:05 +0000] "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Web App Attack
๐ต๐ฑ
94.26.88.142
26 Sep 2026
Wazuh Alert Evidence: Sep 26 20:44:25 ms1.bitstreetx.info postfix/smtpd[1253667]: warning: hostname ...
show more
Wazuh Alert Evidence: Sep 26 20:44:25 ms1.bitstreetx.info postfix/smtpd[1253667]: warning: hostname 142.88.26.94.tbc.bg does not resolve to address 94.26.88.142: Name or service not known
show less
Hacking
๐บ๐ธ
71.6.134.233
26 Sep 2026
Wazuh Alert Evidence: 71.6.134.233 - - [26/Sep/2026:19:55:15 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 71.6.134.233 - - [26/Sep/2026:19:55:15 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
show less
Web App Attack
๐บ๐ธ
20.40.213.110
26 Sep 2026
Wazuh Alert Evidence: 20.40.213.110 - - [26/Sep/2026:19:47:32 +0000] "GET /login HTTP/1.1" 444 0 "-" ...
show more
Wazuh Alert Evidence: 20.40.213.110 - - [26/Sep/2026:19:47:32 +0000] "GET /login HTTP/1.1" 444 0 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
Web App Attack
๐ฌ๐ง
193.176.29.9
26 Sep 2026
Wazuh Alert Evidence: 193.176.29.9 - - [26/Sep/2026:19:45:56 +0000] "POST /onvif/device_service HTTP ...
show more
Wazuh Alert Evidence: 193.176.29.9 - - [26/Sep/2026:19:45:56 +0000] "POST /onvif/device_service HTTP/1.1" 400 264 "-" "Go-http-client/1.1" "-"
show less
Web App Attack
๐จ๐ฆ
85.217.149.3
26 Sep 2026
Wazuh Alert Evidence: 85.217.149.3 - - [26/Sep/2026:19:31:40 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 85.217.149.3 - - [26/Sep/2026:19:31:40 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/140.0.0.0 Safari/537.36 ModatScanner/1.2 (+https://modat.io/)" "-"
show less
Web App Attack
๐บ๐ธ
66.132.195.59
26 Sep 2026
Wazuh Alert Evidence: 66.132.195.59 - - [26/Sep/2026:19:26:52 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 66.132.195.59 - - [26/Sep/2026:19:26:52 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "-"
show less
Web App Attack
๐ณ๐ฑ
159.223.2.61
26 Sep 2026
Wazuh Alert Evidence: 2026/09/26 19:14:55 [error] 936111#936111: *1093 access forbidden by rule, cli ...
show more
Wazuh Alert Evidence: 2026/09/26 19:14:55 [error] 936111#936111: *1093 access forbidden by rule, client: 159.223.2.61, server: ms1.bitstreetx.info, request: "GET / HTTP/2.0", host: "ms1.bitstreetx.info"
show less
Web App Attack
๐ง๐ท
16.5.0.165
26 Sep 2026
Wazuh Alert Evidence: 16.5.0.165 - - [26/Sep/2026:19:13:42 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozill ...
show more
Wazuh Alert Evidence: 16.5.0.165 - - [26/Sep/2026:19:13:42 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; FlowIQ/1.0; +https://flowiq-labs.com/scanning-info)" "-"
show less
Web App Attack