|
๐ฉ๐ช
20.79.254.126
|
|
Wazuh Alert Evidence: 20.79.254.126 - - [10/Oct/2026:08:03:25 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 20.79.254.126 - - [10/Oct/2026:08:03:25 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.98 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ฎ๐ณ
20.219.135.120
|
|
Wazuh Alert Evidence: 20.219.135.120 - - [10/Oct/2026:08:01:51 +0000] "GET /wp-content/plugins/hello ...
show more
Wazuh Alert Evidence: 20.219.135.120 - - [10/Oct/2026:08:01:51 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 162 "-" "-" "-"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
20.205.112.210
|
|
Wazuh Alert Evidence: 20.205.112.210 - - [10/Oct/2026:07:51:06 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/ ...
show more
Wazuh Alert Evidence: 20.205.112.210 - - [10/Oct/2026:07:51:06 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
64.62.156.211
|
|
Wazuh Alert Evidence: 64.62.156.211 - - [10/Oct/2026:07:50:54 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 64.62.156.211 - - [10/Oct/2026:07:50:54 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:142.0) Gecko/20100101 Firefox/142.0" "-"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
152.32.226.203
|
|
Wazuh Alert Evidence: 152.32.226.203 - - [10/Oct/2026:07:50:47 +0000] "GET / HTTP/2.0" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 152.32.226.203 - - [10/Oct/2026:07:50:47 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
64.62.156.202
|
|
Wazuh Alert Evidence: 64.62.156.202 - - [10/Oct/2026:07:45:58 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 64.62.156.202 - - [10/Oct/2026:07:45:58 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:142.0) Gecko/20100101 Firefox/142.0" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
40.119.42.73
|
|
Wazuh Alert Evidence: 40.119.42.73 - - [10/Oct/2026:07:42:46 +0000] "GET / HTTP/1.1" 400 264 "-" "Mo ...
show more
Wazuh Alert Evidence: 40.119.42.73 - - [10/Oct/2026:07:42:46 +0000] "GET / HTTP/1.1" 400 264 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.156.87.230
|
|
Wazuh Alert Evidence: 45.156.87.230 - - [10/Oct/2026:07:42:31 +0000] "GET /cgi-bin/luci/;stok=/local ...
show more
Wazuh Alert Evidence: 45.156.87.230 - - [10/Oct/2026:07:42:31 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 162 "-" "-" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
77.67.26.37
|
|
Wazuh Alert Evidence: 77.67.26.37 - - [10/Oct/2026:07:01:22 +0000] "GET /onvif/device_service HTTP/2 ...
show more
Wazuh Alert Evidence: 77.67.26.37 - - [10/Oct/2026:07:01:22 +0000] "GET /onvif/device_service HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
77.67.26.55
|
|
Wazuh Alert Evidence: 77.67.26.55 - - [10/Oct/2026:07:01:23 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozil ...
show more
Wazuh Alert Evidence: 77.67.26.55 - - [10/Oct/2026:07:01:23 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
200.138.46.76
|
|
Wazuh Alert Evidence: 200.138.46.76 - - [10/Oct/2026:07:01:25 +0000] "GET / HTTP/2.0" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 200.138.46.76 - - [10/Oct/2026:07:01:25 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
200.138.46.96
|
|
Wazuh Alert Evidence: 200.138.46.96 - - [10/Oct/2026:07:01:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 200.138.46.96 - - [10/Oct/2026:07:01:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
show less
|
Web App Attack
|
|
๐ฌ๐ง
200.138.46.35
|
|
Wazuh Alert Evidence: 200.138.46.35 - - [10/Oct/2026:07:01:21 +0000] "GET /onvif/device_service HTTP ...
show more
Wazuh Alert Evidence: 200.138.46.35 - - [10/Oct/2026:07:01:21 +0000] "GET /onvif/device_service HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Infrawatch/1.0; +https://infrawat.ch/)" "-"
show less
|
Web App Attack
|
|
๐ฎ๐ณ
157.20.215.123
|
|
Wazuh Alert Evidence: 157.20.215.123 - - [10/Oct/2026:06:44:11 +0000] "GET / HTTP/2.0" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 157.20.215.123 - - [10/Oct/2026:06:44:11 +0000] "GET / HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; SM-S928B) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/26.0 Chrome/122.0.0.0 Mobile Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
93.123.109.101
|
|
Wazuh Alert Evidence: 2026/10/10 06:13:45 [error] 1175#1175: *1073 access forbidden by rule, client: ...
show more
Wazuh Alert Evidence: 2026/10/10 06:13:45 [error] 1175#1175: *1073 access forbidden by rule, client: 93.123.109.101, server: ms1.bitstreetx.info, request: "GET /openai-proxy/config.yaml HTTP/2.0", host: "ms1.bitstreetx.info"
show less
|
Web App Attack
|
|
๐ญ๐ฐ
168.76.254.75
|
|
Wazuh Alert Evidence: 168.76.254.75 - - [10/Oct/2026:05:52:00 +0000] "GET /.git/config HTTP/1.1" 444 ...
show more
Wazuh Alert Evidence: 168.76.254.75 - - [10/Oct/2026:05:52:00 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "python-requests/2.32.4" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
20.118.203.28
|
|
Wazuh Alert Evidence: 20.118.203.28 - - [10/Oct/2026:05:26:03 +0000] "GET /druid/index.html HTTP/1.1 ...
show more
Wazuh Alert Evidence: 20.118.203.28 - - [10/Oct/2026:05:26:03 +0000] "GET /druid/index.html HTTP/1.1" 403 162 "-" "Mozilla/5.0 zgrab/0.x" "-"
show less
|
Web App Attack
|
|
๐ง๐ช
35.205.18.54
|
|
Wazuh Alert Evidence: 35.205.18.54 - - [10/Oct/2026:05:25:12 +0000] "GET / HTTP/1.1" 444 0 "-" "pyth ...
show more
Wazuh Alert Evidence: 35.205.18.54 - - [10/Oct/2026:05:25:12 +0000] "GET / HTTP/1.1" 444 0 "-" "python-requests/2.34.2" "-"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
77.83.39.94
|
|
Wazuh Alert Evidence: 2026/10/10 05:18:37 [error] 1175#1175: *1058 [client 77.83.39.94] ModSecurity: ...
show more
Wazuh Alert Evidence: 2026/10/10 05:18:37 [error] 1175#1175: *1058 [client 77.83.39.94] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:ANOMALY_SCORE' (Value: `13' ) [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "81"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 13)"] [data ""] [severity "2"] [ver "OWASP_CRS/3.3.5"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "192.168.102.88"] [uri "/.git/config"] [unique_id "179160951787.687638"] [ref ""], client: 77.83.39.94, server: localhost, request: "GET /.git/config HTTP/1.1", host: "59.120.34.189"
show less
|
Web App Attack
|
|
๐ณ๐ฑ
45.142.193.144
|
|
Wazuh Alert Evidence: 45.142.193.144 - - [10/Oct/2026:04:44:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 45.142.193.144 - - [10/Oct/2026:04:44:18 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
71.6.134.229
|
|
Wazuh Alert Evidence: 71.6.134.229 - - [10/Oct/2026:04:18:09 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 71.6.134.229 - - [10/Oct/2026:04:18:09 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ง๐ช
34.62.146.89
|
|
Wazuh Alert Evidence: 34.62.146.89 - - [10/Oct/2026:04:16:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
Wazuh Alert Evidence: 34.62.146.89 - - [10/Oct/2026:04:16:24 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
172.236.228.115
|
|
Wazuh Alert Evidence: 172.236.228.115 - - [10/Oct/2026:04:08:21 +0000] "GET / HTTP/1.1" 444 0 "-" "M ...
show more
Wazuh Alert Evidence: 172.236.228.115 - - [10/Oct/2026:04:08:21 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐ง๐ช
207.175.56.43
|
|
Wazuh Alert Evidence: 207.175.56.43 - - [10/Oct/2026:03:52:36 +0000] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Wazuh Alert Evidence: 207.175.56.43 - - [10/Oct/2026:03:52:36 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|
|
๐บ๐ธ
165.227.21.218
|
|
Wazuh Alert Evidence: 165.227.21.218 - - [10/Oct/2026:03:47:30 +0000] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
Wazuh Alert Evidence: 165.227.21.218 - - [10/Oct/2026:03:47:30 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "-"
show less
|
Web App Attack
|