198.51.100.77 - - [12/Mar/2025:16:50:31 +0000] "GET /....//....//etc/passwd HTTP/1.1" 403 162wazuh: rule 31151 level 6 · Multiple web server 400 error codes from same source ip203.0.113.24 - - [12/Mar/2025:16:50:33 +0000] "GET /.env HTTP/1.1" 403 162limit_req[perip] limiting requests, excess: 20.480 by zone "perip", client: 198.51.100.77node_cpu_seconds_total{mode="steal"} rate 5m -> 0.18wazuh: rule 5710 level 5 · Attempt to login using a non-existent user192.0.2.51 - - [12/Mar/2025:16:50:36 +0000] "GET /.git/config HTTP/1.1" 403 162soar: enrich 198.51.100.77 -> abuse_confidence=100 engines_flagged=12 · notify #opspredict_linear(node_filesystem_avail_bytes{mountpoint="/"}[6h], 86400) < 0wazuh: rule 31516 level 6 · Suspicious URL accesssemgrep: 0 blocking findings · gitleaks: no secrets · trivy: 0 critical198.51.100.77 - - [12/Mar/2025:16:50:41 +0000] "GET /.ssh/id_rsa HTTP/1.1" 403 162198.51.100.77 - - [12/Mar/2025:16:50:31 +0000] "GET /....//....//etc/passwd HTTP/1.1" 403 162wazuh: rule 31151 level 6 · Multiple web server 400 error codes from same source ip203.0.113.24 - - [12/Mar/2025:16:50:33 +0000] "GET /.env HTTP/1.1" 403 162limit_req[perip] limiting requests, excess: 20.480 by zone "perip", client: 198.51.100.77node_cpu_seconds_total{mode="steal"} rate 5m -> 0.18wazuh: rule 5710 level 5 · Attempt to login using a non-existent user192.0.2.51 - - [12/Mar/2025:16:50:36 +0000] "GET /.git/config HTTP/1.1" 403 162soar: enrich 198.51.100.77 -> abuse_confidence=100 engines_flagged=12 · notify #opspredict_linear(node_filesystem_avail_bytes{mountpoint="/"}[6h], 86400) < 0wazuh: rule 31516 level 6 · Suspicious URL accesssemgrep: 0 blocking findings · gitleaks: no secrets · trivy: 0 critical198.51.100.77 - - [12/Mar/2025:16:50:41 +0000] "GET /.ssh/id_rsa HTTP/1.1" 403 162