0% found this document useful (0 votes)
11 views6 pages

wazuh-module-agents-001-general-1746079449

Uploaded by

Hendra Tanjung
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
11 views6 pages

wazuh-module-agents-001-general-1746079449

Uploaded by

Hendra Tanjung
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 6

info@wazuh.

com
https://wazuh.com

Threat hunting report


ID Name IP address Version Manager Operating system Registration date Last keep alive
001 sipenaemas 10.90.143.138 Wazuh v4.11.2 wazuh-manager- Ubuntu 24.04.1 Apr 18, 2025 @ May 1, 2025 @
master-0 LTS 14:58:54.000 06:04:00.000

Group: default

Browse through your security alerts, identifying issues and threats in your environment.

2025-04-30T14:04:09 to 2025-05-01T14:04:09
cluster.name: 6ff7k1vyg916 AND agent.id: 001

Copyright © Wazuh, Inc. Page 1 of 6


[email protected]
https://wazuh.com

Top 10 Alert groups evolution

Alerts

Copyright © Wazuh, Inc. Page 2 of 6


[email protected]
https://wazuh.com

Top 5 alerts

Top 5 rule groups

Top 5 PCI DSS Requirements

Copyright © Wazuh, Inc. Page 3 of 6


[email protected]
https://wazuh.com

Copyright © Wazuh, Inc. Page 4 of 6


[email protected]
https://wazuh.com

Alerts summary

Rule ID Description Level Count


31101 Web server 400 error code. 5 2415
31151 Multiple web server 400 error codes from same source ip. 10 189
653 Host Blocked by host-deny Active Response 3 189
654 Host Unblocked by host-deny Active Response 3 12
31516 Suspicious URL access. 6 5
31509 CMS (WordPress or Joomla) login attempt. 3 2
31301 Nginx error message. 3 1
31303 Nginx critical message. 5 1
591 Log file rotated. 3 1

Copyright © Wazuh, Inc. Page 5 of 6


[email protected]
https://wazuh.com

Groups summary

Groups Count
web 2613
accesslog 2604
attack 2422
ossec 202
active_response 201
recon 189
web_scan 189
appsec 7
nginx 2

Copyright © Wazuh, Inc. Page 6 of 6

You might also like