Failed password for nattapong from 91.219.236.18 port 43395 ssh2


Failed password for nattapong from 91.219.236.18 port 51146 ssh2


Failed password for nattapong from 91.219.236.18 port 51593 ssh2


Failed password for nattapong from 91.219.236.18 port 49630 ssh2


Failed password for nattapong from 91.219.236.18 port 58681 ssh2


Accepted password for nattapong from 10.0.5.182 port 57164 ssh2


Accepted password for somchai from 10.0.2.206 port 46148 ssh2


CONN src=10.0.0.180 dst=193.27.228.114 dport=443 bytes=808 interval=30s


CONN src=10.0.0.180 dst=193.27.228.114 dport=443 bytes=657 interval=30s


CONN src=10.0.0.180 dst=193.27.228.114 dport=443 bytes=763 interval=30s


CONN src=10.0.0.180 dst=193.27.228.114 dport=443 bytes=806 interval=30s


CONN src=10.0.0.180 dst=193.27.228.114 dport=443 bytes=837 interval=30s


ALLOW IN=66.184.235.17 OUT= PROTO=TCP DPT=443


174.147.147.188 - - "GET / HTTP/1.1" 200 972


152.247.91.95 - - "GET /static/app.js HTTP/1.1" 200 4745


ALLOW IN=144.132.247.160 OUT= PROTO=TCP DPT=80


Failed password for svc_backup from 171.153.221.40 port 55523 ssh2


Failed password for svc_backup from 171.153.221.40 port 40249 ssh2


Failed password for svc_backup from 171.153.221.40 port 52272 ssh2


Failed password for svc_backup from 171.153.221.40 port 57466 ssh2


Failed password for svc_backup from 171.153.221.40 port 53774 ssh2


Failed password for svc_backup from 171.153.221.40 port 42779 ssh2


Failed password for svc_backup from 171.153.221.40 port 46939 ssh2


Failed password for svc_backup from 171.153.221.40 port 45037 ssh2


Failed password for svc_backup from 171.153.221.40 port 43553 ssh2


Failed password for svc_backup from 171.153.221.40 port 47512 ssh2


185.86.246.253 - - "GET /dashboard HTTP/1.1" 200 397


Accepted password for guest from 10.0.0.111 port 55305 ssh2


73.69.77.51 - - "GET /api/orders?page=2 HTTP/1.1" 200 4183


Accepted password for root from 10.0.1.105 port 49340 ssh2


OUTBOUND src=10.0.5.192 dst=45.137.21.9 bytes=6380584960 proto=TCP dport=443 duration=91s


44.212.26.63 - - "GET /login HTTP/1.1" 200 7548


57.97.208.41 - - "GET /api/orders?page=2 HTTP/1.1" 200 6269


130.211.37.27 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 113


ALLOW IN=16.79.8.176 OUT= PROTO=TCP DPT=443


106.73.39.154 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 106


Accepted password for postgres from 10.0.1.81 port 57448 ssh2


115.235.178.77 - - "GET /api/orders?page=2 HTTP/1.1" 200 763


ALLOW IN=24.127.113.156 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.0.138 port 56510 ssh2


138.173.85.158 - - "GET /api/products HTTP/1.1" 200 3176


ALLOW IN=32.166.47.241 OUT= PROTO=TCP DPT=80


ALLOW IN=52.44.131.218 OUT= PROTO=TCP DPT=80


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 245


156.88.139.252 - - "GET /api/orders?page=2 HTTP/1.1" 200 5775


Failed password for somchai from 91.219.236.18 port 41818 ssh2


Failed password for somchai from 91.219.236.18 port 59821 ssh2


Failed password for somchai from 91.219.236.18 port 49829 ssh2


Failed password for somchai from 91.219.236.18 port 54155 ssh2


Failed password for somchai from 91.219.236.18 port 40677 ssh2


Failed password for somchai from 91.219.236.18 port 59548 ssh2


Failed password for somchai from 91.219.236.18 port 41344 ssh2


Failed password for somchai from 91.219.236.18 port 56620 ssh2


Failed password for somchai from 91.219.236.18 port 41394 ssh2


Failed password for somchai from 91.219.236.18 port 59828 ssh2


Failed password for somchai from 91.219.236.18 port 55825 ssh2


Failed password for somchai from 91.219.236.18 port 43849 ssh2


13.100.0.131 - - "GET /dashboard HTTP/1.1" 200 7396


ALLOW IN=47.203.39.77 OUT= PROTO=TCP DPT=80


42.131.165.187 - - "GET /login HTTP/1.1" 200 4788


Accepted password for www-data from 10.0.3.77 port 47093 ssh2


19.104.228.3 - - "GET /api/products HTTP/1.1" 200 1818


147.157.107.58 - - "GET /static/app.js HTTP/1.1" 200 1027


ALLOW IN=38.9.154.60 OUT= PROTO=TCP DPT=443


ALLOW IN=186.158.103.30 OUT= PROTO=TCP DPT=80


Failed password for nattapong from 209.141.56.12 port 44609 ssh2


Failed password for nattapong from 209.141.56.12 port 57479 ssh2


Failed password for nattapong from 209.141.56.12 port 47648 ssh2


Failed password for nattapong from 209.141.56.12 port 47493 ssh2


Failed password for nattapong from 209.141.56.12 port 48280 ssh2


Failed password for nattapong from 209.141.56.12 port 55362 ssh2


Failed password for nattapong from 209.141.56.12 port 40026 ssh2


Failed password for nattapong from 209.141.56.12 port 44876 ssh2


Failed password for nattapong from 209.141.56.12 port 48543 ssh2


Failed password for nattapong from 209.141.56.12 port 49043 ssh2


Failed password for nattapong from 209.141.56.12 port 42742 ssh2


Failed password for nattapong from 209.141.56.12 port 55800 ssh2


Failed password for nattapong from 209.141.56.12 port 42081 ssh2


Failed password for nattapong from 209.141.56.12 port 40264 ssh2


Failed password for nattapong from 209.141.56.12 port 59013 ssh2


Failed password for nattapong from 209.141.56.12 port 43040 ssh2


Failed password for nattapong from 209.141.56.12 port 57235 ssh2


Accepted password for nattapong from 209.141.56.12 port 51234 ssh2


Failed password for nattapong from 209.141.56.12 port 59279 ssh2


Failed password for nattapong from 209.141.56.12 port 55288 ssh2


Failed password for nattapong from 209.141.56.12 port 50381 ssh2


33.248.131.153 - - "GET / HTTP/1.1" 200 4990


ALLOW IN=167.34.30.194 OUT= PROTO=TCP DPT=443


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/su -


ALLOW IN=25.55.44.124 OUT= PROTO=TCP DPT=443


Failed password for somchai from 93.180.136.129 port 41784 ssh2


Failed password for somchai from 93.180.136.129 port 52216 ssh2


Failed password for somchai from 93.180.136.129 port 54824 ssh2


Failed password for somchai from 93.180.136.129 port 56431 ssh2


Failed password for somchai from 93.180.136.129 port 57429 ssh2


Failed password for somchai from 93.180.136.129 port 55003 ssh2


Failed password for somchai from 93.180.136.129 port 42627 ssh2


Failed password for somchai from 93.180.136.129 port 44020 ssh2


Failed password for somchai from 93.180.136.129 port 54810 ssh2


Failed password for somchai from 93.180.136.129 port 45399 ssh2


Failed password for somchai from 93.180.136.129 port 57460 ssh2


Failed password for somchai from 93.180.136.129 port 57061 ssh2


Failed password for somchai from 93.180.136.129 port 52063 ssh2


Failed password for somchai from 93.180.136.129 port 45859 ssh2


Failed password for somchai from 93.180.136.129 port 42521 ssh2


Failed password for somchai from 93.180.136.129 port 42150 ssh2


Failed password for somchai from 93.180.136.129 port 43670 ssh2


Failed password for somchai from 93.180.136.129 port 44931 ssh2


Failed password for somchai from 93.180.136.129 port 53649 ssh2


Failed password for somchai from 93.180.136.129 port 44848 ssh2


Accepted password for admin from 10.0.3.178 port 43660 ssh2


Failed password for somchai from 93.180.136.129 port 40743 ssh2


ALLOW IN=98.104.135.130 OUT= PROTO=TCP DPT=443


ALLOW IN=187.27.200.136 OUT= PROTO=TCP DPT=80


94.172.194.72 - - "GET /health HTTP/1.1" 200 7992


79.165.145.87 - - "GET /static/app.js HTTP/1.1" 200 4934


84.255.14.133 - - "GET /static/app.js HTTP/1.1" 200 6044


ALLOW IN=117.84.246.143 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.0.193 port 45987 ssh2


Failed password for nattapong from 45.137.21.9 port 55885 ssh2


Failed password for nattapong from 45.137.21.9 port 48937 ssh2


Failed password for nattapong from 45.137.21.9 port 55957 ssh2


Failed password for nattapong from 45.137.21.9 port 46872 ssh2


Failed password for nattapong from 45.137.21.9 port 45008 ssh2


Failed password for nattapong from 45.137.21.9 port 55205 ssh2


Failed password for nattapong from 45.137.21.9 port 51597 ssh2


Failed password for nattapong from 45.137.21.9 port 48805 ssh2


Failed password for nattapong from 45.137.21.9 port 52754 ssh2


Failed password for nattapong from 45.137.21.9 port 58777 ssh2


Failed password for nattapong from 45.137.21.9 port 50412 ssh2


Failed password for nattapong from 45.137.21.9 port 48857 ssh2


Failed password for nattapong from 45.137.21.9 port 44599 ssh2


Failed password for nattapong from 45.137.21.9 port 40431 ssh2


Failed password for nattapong from 45.137.21.9 port 56126 ssh2


Failed password for nattapong from 45.137.21.9 port 56693 ssh2


Failed password for nattapong from 45.137.21.9 port 56327 ssh2


Failed password for nattapong from 45.137.21.9 port 59152 ssh2


Accepted password for nattapong from 45.137.21.9 port 51234 ssh2


Failed password for nattapong from 45.137.21.9 port 47299 ssh2


Failed password for nattapong from 45.137.21.9 port 48231 ssh2


Failed password for nattapong from 45.137.21.9 port 40617 ssh2


Failed password for nattapong from 45.137.21.9 port 57973 ssh2


Failed password for nattapong from 45.137.21.9 port 54162 ssh2


Accepted password for root from 10.0.1.28 port 48607 ssh2


132.188.251.98 - - "GET /api/products HTTP/1.1" 200 7246


OUTBOUND src=10.0.5.20 dst=91.219.236.18 bytes=4570742784 proto=TCP dport=443 duration=567s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 350


Accepted password for deploy from 10.0.5.124 port 55797 ssh2


Accepted password for www-data from 10.0.3.86 port 57780 ssh2


ALLOW IN=181.160.77.61 OUT= PROTO=TCP DPT=80


132.49.121.205 - - "GET /dashboard HTTP/1.1" 200 3864


Accepted password for somchai from 10.0.2.65 port 57240 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


ALLOW IN=110.184.97.27 OUT= PROTO=TCP DPT=443


37.47.194.25 - - "GET /api/products HTTP/1.1" 200 7142


ALLOW IN=102.142.65.187 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.1.214 port 57242 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/su -


Accepted password for svc_backup from 10.0.1.58 port 42734 ssh2


Failed password for postgres from 193.27.228.114 port 58895 ssh2


Failed password for postgres from 193.27.228.114 port 47015 ssh2


Failed password for postgres from 193.27.228.114 port 43303 ssh2


Failed password for postgres from 193.27.228.114 port 53498 ssh2


Failed password for postgres from 193.27.228.114 port 49935 ssh2


Failed password for postgres from 193.27.228.114 port 58125 ssh2


Failed password for postgres from 193.27.228.114 port 45457 ssh2


Failed password for postgres from 193.27.228.114 port 59175 ssh2


Failed password for postgres from 193.27.228.114 port 53995 ssh2


Failed password for postgres from 193.27.228.114 port 51917 ssh2


Failed password for postgres from 193.27.228.114 port 44714 ssh2


Accepted password for postgres from 193.27.228.114 port 51234 ssh2


Failed password for postgres from 193.27.228.114 port 48012 ssh2


Failed password for postgres from 193.27.228.114 port 57700 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for postgres from 10.0.1.4 port 55410 ssh2


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


Failed password for somchai from 156.147.157.149 port 40672 ssh2


Failed password for somchai from 156.147.157.149 port 52865 ssh2


Failed password for somchai from 156.147.157.149 port 55023 ssh2


Failed password for somchai from 156.147.157.149 port 47142 ssh2


Failed password for somchai from 156.147.157.149 port 45150 ssh2


Failed password for somchai from 156.147.157.149 port 51401 ssh2


Failed password for somchai from 156.147.157.149 port 42388 ssh2


Failed password for somchai from 156.147.157.149 port 50750 ssh2


Failed password for somchai from 156.147.157.149 port 46963 ssh2


Failed password for somchai from 156.147.157.149 port 50259 ssh2


Failed password for somchai from 156.147.157.149 port 44260 ssh2


Failed password for somchai from 156.147.157.149 port 46017 ssh2


Failed password for somchai from 156.147.157.149 port 43465 ssh2


Failed password for somchai from 156.147.157.149 port 57604 ssh2


Failed password for somchai from 156.147.157.149 port 46021 ssh2


Accepted password for somchai from 156.147.157.149 port 51234 ssh2


209.141.56.12 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 92


Failed password for somchai from 156.147.157.149 port 42003 ssh2


Failed password for somchai from 156.147.157.149 port 46120 ssh2


Failed password for somchai from 156.147.157.149 port 58765 ssh2


Failed password for somchai from 156.147.157.149 port 44897 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=36.165.168.88 OUT= PROTO=TCP DPT=25 FLAGS=SYN


ALLOW IN=61.222.200.93 OUT= PROTO=TCP DPT=80


ALLOW IN=145.181.5.4 OUT= PROTO=TCP DPT=443


Failed password for svc_backup from 209.141.56.12 port 49188 ssh2


Failed password for svc_backup from 209.141.56.12 port 59288 ssh2


Failed password for svc_backup from 209.141.56.12 port 51167 ssh2


Failed password for svc_backup from 209.141.56.12 port 46851 ssh2


Failed password for svc_backup from 209.141.56.12 port 43892 ssh2


Failed password for svc_backup from 209.141.56.12 port 48202 ssh2


Failed password for svc_backup from 209.141.56.12 port 55597 ssh2


Failed password for svc_backup from 209.141.56.12 port 42906 ssh2


Failed password for svc_backup from 209.141.56.12 port 58863 ssh2


Failed password for svc_backup from 209.141.56.12 port 57592 ssh2


Failed password for svc_backup from 209.141.56.12 port 47903 ssh2


Failed password for svc_backup from 209.141.56.12 port 47089 ssh2


Failed password for svc_backup from 209.141.56.12 port 50837 ssh2


Failed password for svc_backup from 209.141.56.12 port 49079 ssh2


Failed password for svc_backup from 209.141.56.12 port 45473 ssh2


Failed password for svc_backup from 209.141.56.12 port 40208 ssh2


Failed password for svc_backup from 209.141.56.12 port 40003 ssh2


Failed password for svc_backup from 209.141.56.12 port 51434 ssh2


Failed password for svc_backup from 209.141.56.12 port 54822 ssh2


Accepted password for svc_backup from 209.141.56.12 port 51234 ssh2


Failed password for svc_backup from 209.141.56.12 port 59099 ssh2


Failed password for postgres from 193.27.228.114 port 58710 ssh2


Failed password for svc_backup from 209.141.56.12 port 45383 ssh2


Failed password for postgres from 193.27.228.114 port 44229 ssh2


Failed password for postgres from 193.27.228.114 port 45679 ssh2


Failed password for postgres from 193.27.228.114 port 55687 ssh2


Failed password for postgres from 193.27.228.114 port 55693 ssh2


Failed password for postgres from 193.27.228.114 port 49406 ssh2


Failed password for postgres from 193.27.228.114 port 49874 ssh2


Failed password for postgres from 193.27.228.114 port 51394 ssh2


Failed password for postgres from 193.27.228.114 port 51032 ssh2


Failed password for postgres from 193.27.228.114 port 59189 ssh2


Accepted password for postgres from 193.27.228.114 port 51234 ssh2


Failed password for postgres from 193.27.228.114 port 53526 ssh2


88.255.52.183 - - "GET /static/app.js HTTP/1.1" 200 6682


ALLOW IN=20.189.37.5 OUT= PROTO=TCP DPT=443


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


Accepted password for guest from 10.0.3.2 port 50870 ssh2


OUTBOUND src=10.0.2.187 dst=185.220.101.34 bytes=1087373312 proto=TCP dport=443 duration=347s


58.39.239.123 - - "GET /api/products HTTP/1.1" 200 5546


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=579 interval=300s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=363 interval=300s


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=495 interval=300s


55.205.29.131 - - "GET /health HTTP/1.1" 200 2549


Accepted password for www-data from 10.0.0.190 port 51815 ssh2


Accepted password for postgres from 10.0.0.74 port 50961 ssh2


ALLOW IN=16.143.99.123 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=652 interval=300s


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=477 interval=300s


45.8.120.166 - - "GET /dashboard HTTP/1.1" 200 3350


61.19.197.250 - - "GET /api/products HTTP/1.1" 200 4828


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=603 interval=300s


Accepted password for oppa from 10.0.3.41 port 54908 ssh2


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=644 interval=300s


18.86.230.111 - - "GET /dashboard HTTP/1.1" 200 2358


Failed password for admin from 209.141.56.12 port 50012 ssh2


Failed password for admin from 209.141.56.12 port 48150 ssh2


Failed password for admin from 209.141.56.12 port 40047 ssh2


Failed password for admin from 209.141.56.12 port 40618 ssh2


Failed password for admin from 209.141.56.12 port 52249 ssh2


Failed password for admin from 209.141.56.12 port 48281 ssh2


Failed password for admin from 209.141.56.12 port 57910 ssh2


Failed password for admin from 209.141.56.12 port 43263 ssh2


Failed password for admin from 209.141.56.12 port 52811 ssh2


Failed password for admin from 209.141.56.12 port 50787 ssh2


Failed password for admin from 209.141.56.12 port 59014 ssh2


Failed password for admin from 209.141.56.12 port 40140 ssh2


Failed password for admin from 209.141.56.12 port 49507 ssh2


Failed password for admin from 209.141.56.12 port 53343 ssh2


Failed password for admin from 209.141.56.12 port 44676 ssh2


Failed password for admin from 209.141.56.12 port 50855 ssh2


Failed password for admin from 209.141.56.12 port 40900 ssh2


Failed password for admin from 209.141.56.12 port 43142 ssh2


Failed password for admin from 209.141.56.12 port 43112 ssh2


Accepted password for admin from 209.141.56.12 port 51234 ssh2


Failed password for admin from 209.141.56.12 port 53529 ssh2


Failed password for admin from 209.141.56.12 port 45569 ssh2


Failed password for admin from 209.141.56.12 port 40117 ssh2


Failed password for admin from 209.141.56.12 port 44246 ssh2


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=525 interval=300s


ALLOW IN=48.8.133.142 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=882 interval=300s


CONN src=10.0.3.219 dst=193.27.228.114 dport=443 bytes=438 interval=300s


ALLOW IN=76.195.51.34 OUT= PROTO=TCP DPT=80


Failed password for admin from 91.219.236.18 port 42427 ssh2


Failed password for admin from 91.219.236.18 port 54200 ssh2


Failed password for admin from 91.219.236.18 port 50315 ssh2


Failed password for admin from 91.219.236.18 port 57081 ssh2


Failed password for admin from 91.219.236.18 port 44485 ssh2


Failed password for admin from 91.219.236.18 port 46238 ssh2


Failed password for admin from 91.219.236.18 port 46411 ssh2


Failed password for admin from 91.219.236.18 port 55876 ssh2


Failed password for admin from 91.219.236.18 port 56276 ssh2


Failed password for admin from 91.219.236.18 port 42906 ssh2


Failed password for admin from 91.219.236.18 port 41167 ssh2


Failed password for admin from 91.219.236.18 port 54231 ssh2


Failed password for admin from 91.219.236.18 port 56078 ssh2


Failed password for admin from 91.219.236.18 port 40261 ssh2


Failed password for admin from 91.219.236.18 port 55404 ssh2


Failed password for admin from 91.219.236.18 port 53702 ssh2


Failed password for admin from 91.219.236.18 port 52327 ssh2


Failed password for admin from 91.219.236.18 port 44318 ssh2


Failed password for admin from 91.219.236.18 port 47018 ssh2


Accepted password for admin from 91.219.236.18 port 51234 ssh2


Failed password for admin from 91.219.236.18 port 46833 ssh2


Failed password for admin from 91.219.236.18 port 45836 ssh2


Failed password for admin from 91.219.236.18 port 48620 ssh2


Failed password for admin from 91.219.236.18 port 52461 ssh2


Failed password for admin from 91.219.236.18 port 59133 ssh2


180.35.153.151 - - "GET /static/app.js HTTP/1.1" 200 679


ALLOW IN=122.167.87.25 OUT= PROTO=TCP DPT=80


ALLOW IN=214.230.234.167 OUT= PROTO=TCP DPT=80


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/su -


153.196.23.200 - - "GET /static/app.js HTTP/1.1" 200 5784


ALLOW IN=196.14.113.13 OUT= PROTO=TCP DPT=443


151.163.25.140 - - "GET / HTTP/1.1" 200 5327


Accepted password for svc_backup from 10.0.3.142 port 41747 ssh2


Accepted password for somchai from 10.0.3.100 port 44829 ssh2


62.141.244.247 - - "GET /dashboard HTTP/1.1" 200 2408


ALLOW IN=44.108.11.151 OUT= PROTO=TCP DPT=80


ALLOW IN=67.125.115.113 OUT= PROTO=TCP DPT=80


ALLOW IN=139.42.51.101 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.1.18 port 49431 ssh2


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 11


Accepted password for oppa from 10.0.3.210 port 57318 ssh2


21.21.112.195 - - "GET /login HTTP/1.1" 200 7982


ALLOW IN=108.230.226.77 OUT= PROTO=TCP DPT=443


13.50.193.251 - - "GET /login HTTP/1.1" 200 3301


Accepted password for www-data from 10.0.4.150 port 52222 ssh2


193.27.228.114 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 499


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


ALLOW IN=192.171.250.30 OUT= PROTO=TCP DPT=443


Failed password for postgres from 185.220.101.34 port 44121 ssh2


Failed password for postgres from 185.220.101.34 port 56864 ssh2


75.249.204.120 - - "GET /api/orders?page=2 HTTP/1.1" 200 4010


Failed password for postgres from 185.220.101.34 port 48516 ssh2


Failed password for postgres from 185.220.101.34 port 52202 ssh2


Failed password for postgres from 185.220.101.34 port 41610 ssh2


Failed password for postgres from 185.220.101.34 port 59468 ssh2


Failed password for postgres from 185.220.101.34 port 55909 ssh2


Failed password for postgres from 185.220.101.34 port 41828 ssh2


Failed password for postgres from 185.220.101.34 port 41538 ssh2


Failed password for postgres from 185.220.101.34 port 44452 ssh2


Failed password for postgres from 185.220.101.34 port 57378 ssh2


Failed password for postgres from 185.220.101.34 port 58756 ssh2


Failed password for postgres from 185.220.101.34 port 52331 ssh2


Failed password for postgres from 185.220.101.34 port 48977 ssh2


Failed password for postgres from 185.220.101.34 port 48199 ssh2


Accepted password for deploy from 10.0.2.95 port 53507 ssh2


Failed password for deploy from 45.137.21.9 port 54096 ssh2


Failed password for deploy from 45.137.21.9 port 50286 ssh2


Failed password for deploy from 45.137.21.9 port 55855 ssh2


Failed password for deploy from 45.137.21.9 port 40481 ssh2


Failed password for deploy from 45.137.21.9 port 42838 ssh2


Failed password for deploy from 45.137.21.9 port 44615 ssh2


Failed password for deploy from 45.137.21.9 port 58408 ssh2


Failed password for deploy from 45.137.21.9 port 58808 ssh2


Failed password for deploy from 45.137.21.9 port 59502 ssh2


Failed password for deploy from 45.137.21.9 port 55536 ssh2


Failed password for deploy from 45.137.21.9 port 50722 ssh2


Failed password for deploy from 45.137.21.9 port 50186 ssh2


Failed password for deploy from 45.137.21.9 port 53539 ssh2


Failed password for deploy from 45.137.21.9 port 49602 ssh2


Failed password for deploy from 45.137.21.9 port 51292 ssh2


Failed password for deploy from 45.137.21.9 port 57101 ssh2


Failed password for deploy from 45.137.21.9 port 49143 ssh2


Failed password for deploy from 45.137.21.9 port 43786 ssh2


Failed password for deploy from 45.137.21.9 port 58197 ssh2


Failed password for deploy from 45.137.21.9 port 42886 ssh2


Failed password for deploy from 45.137.21.9 port 46990 ssh2


Failed password for deploy from 45.137.21.9 port 56864 ssh2


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=844 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=834 interval=30s


Accepted password for root from 10.0.5.51 port 53056 ssh2


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=589 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=351 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=897 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=448 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=232 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=786 interval=30s


CONN src=10.0.4.124 dst=45.137.21.9 dport=443 bytes=312 interval=30s


31.119.51.98 - - "GET /api/products HTTP/1.1" 200 3914


Accepted password for nattapong from 10.0.2.6 port 51578 ssh2


ALLOW IN=166.112.166.172 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.1.69 port 45529 ssh2


Accepted password for deploy from 10.0.2.61 port 53132 ssh2


ALLOW IN=223.242.187.99 OUT= PROTO=TCP DPT=80


ALLOW IN=131.27.3.140 OUT= PROTO=TCP DPT=443


ALLOW IN=136.3.178.180 OUT= PROTO=TCP DPT=80


Failed password for root from 185.220.101.34 port 43057 ssh2


Failed password for root from 185.220.101.34 port 43609 ssh2


Failed password for root from 185.220.101.34 port 58165 ssh2


Failed password for root from 185.220.101.34 port 41575 ssh2


Failed password for root from 185.220.101.34 port 44317 ssh2


Failed password for root from 185.220.101.34 port 46411 ssh2


Failed password for root from 185.220.101.34 port 45967 ssh2


Failed password for root from 185.220.101.34 port 42079 ssh2


Failed password for root from 185.220.101.34 port 42682 ssh2


Failed password for root from 185.220.101.34 port 54063 ssh2


Failed password for root from 185.220.101.34 port 47247 ssh2


Failed password for root from 185.220.101.34 port 49322 ssh2


Failed password for root from 185.220.101.34 port 47537 ssh2


Failed password for root from 185.220.101.34 port 51703 ssh2


Failed password for root from 185.220.101.34 port 40660 ssh2


Failed password for root from 185.220.101.34 port 59945 ssh2


Failed password for root from 185.220.101.34 port 59031 ssh2


Failed password for root from 185.220.101.34 port 56645 ssh2


Failed password for root from 185.220.101.34 port 44445 ssh2


Failed password for root from 185.220.101.34 port 51168 ssh2


Failed password for root from 185.220.101.34 port 54105 ssh2


Failed password for root from 185.220.101.34 port 56544 ssh2


Failed password for root from 185.220.101.34 port 59834 ssh2


ALLOW IN=70.8.189.70 OUT= PROTO=TCP DPT=443


180.76.124.39 - - "GET /login HTTP/1.1" 200 6144


90.51.91.40 - - "GET /api/products HTTP/1.1" 200 6410


Accepted password for postgres from 10.0.4.86 port 40738 ssh2


Failed password for postgres from 185.220.101.34 port 55943 ssh2


Failed password for postgres from 185.220.101.34 port 49776 ssh2


Failed password for postgres from 185.220.101.34 port 40506 ssh2


Failed password for postgres from 185.220.101.34 port 51019 ssh2


Failed password for postgres from 185.220.101.34 port 58098 ssh2


Failed password for postgres from 185.220.101.34 port 52247 ssh2


Failed password for postgres from 185.220.101.34 port 43751 ssh2


Failed password for postgres from 185.220.101.34 port 41739 ssh2


Failed password for postgres from 185.220.101.34 port 59535 ssh2


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


ALLOW IN=109.97.98.135 OUT= PROTO=TCP DPT=80


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for svc_backup from 10.0.5.31 port 54579 ssh2


ALLOW IN=116.190.234.250 OUT= PROTO=TCP DPT=80


209.141.56.12 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 14


Failed password for nattapong from 209.141.56.12 port 59608 ssh2


Failed password for nattapong from 209.141.56.12 port 57689 ssh2


Failed password for nattapong from 209.141.56.12 port 56002 ssh2


Failed password for nattapong from 209.141.56.12 port 52109 ssh2


Failed password for nattapong from 209.141.56.12 port 49235 ssh2


Failed password for nattapong from 209.141.56.12 port 46394 ssh2


Failed password for nattapong from 209.141.56.12 port 43930 ssh2


Failed password for nattapong from 209.141.56.12 port 53975 ssh2


Failed password for nattapong from 209.141.56.12 port 49664 ssh2


Failed password for nattapong from 209.141.56.12 port 54576 ssh2


Failed password for nattapong from 209.141.56.12 port 54164 ssh2


Failed password for nattapong from 209.141.56.12 port 44134 ssh2


Failed password for nattapong from 209.141.56.12 port 48619 ssh2


Accepted password for nattapong from 209.141.56.12 port 51234 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


ALLOW IN=172.164.106.62 OUT= PROTO=TCP DPT=443


37.193.17.34 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 127


Accepted password for postgres from 10.0.3.111 port 54028 ssh2


ALLOW IN=200.19.89.107 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.4.221 port 50833 ssh2


ALLOW IN=215.208.73.197 OUT= PROTO=TCP DPT=443


ALLOW IN=216.18.248.198 OUT= PROTO=TCP DPT=80


ALLOW IN=165.13.101.184 OUT= PROTO=TCP DPT=443


115.182.14.194 - - "GET /api/orders?page=2 HTTP/1.1" 200 1050


CONN src=10.0.1.152 dst=45.137.21.9 dport=443 bytes=326 interval=30s


CONN src=10.0.1.152 dst=45.137.21.9 dport=443 bytes=304 interval=30s


CONN src=10.0.1.152 dst=45.137.21.9 dport=443 bytes=353 interval=30s


CONN src=10.0.1.152 dst=45.137.21.9 dport=443 bytes=548 interval=30s


CONN src=10.0.1.152 dst=45.137.21.9 dport=443 bytes=848 interval=30s


ALLOW IN=123.191.224.239 OUT= PROTO=TCP DPT=80


22.162.242.181 - - "GET /health HTTP/1.1" 200 3323


Accepted password for somchai from 10.0.1.201 port 59159 ssh2


66.156.217.228 - - "GET /dashboard HTTP/1.1" 200 4880


Accepted password for nattapong from 10.0.4.19 port 46340 ssh2


149.182.39.246 - - "GET /api/orders?page=2 HTTP/1.1" 200 1301


Accepted password for svc_backup from 10.0.4.76 port 57187 ssh2


Accepted password for guest from 10.0.3.135 port 43734 ssh2


ALLOW IN=164.172.37.112 OUT= PROTO=TCP DPT=443


181.167.107.62 - - "GET /dashboard HTTP/1.1" 200 1418


ALLOW IN=137.110.213.126 OUT= PROTO=TCP DPT=80


41.126.20.159 - - "GET / HTTP/1.1" 200 3634


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=796 interval=30s


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=900 interval=30s


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=862 interval=30s


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=669 interval=30s


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=287 interval=30s


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=210 interval=30s


CONN src=10.0.3.234 dst=209.141.56.12 dport=443 bytes=680 interval=30s


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=528 interval=300s


CONN src=10.0.3.126 dst=193.27.228.114 dport=443 bytes=610 interval=60s


ALLOW IN=16.145.9.165 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.126 dst=193.27.228.114 dport=443 bytes=260 interval=60s


CONN src=10.0.3.126 dst=193.27.228.114 dport=443 bytes=368 interval=60s


CONN src=10.0.3.126 dst=193.27.228.114 dport=443 bytes=588 interval=60s


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=312 interval=300s


CONN src=10.0.3.126 dst=193.27.228.114 dport=443 bytes=202 interval=60s


CONN src=10.0.3.126 dst=193.27.228.114 dport=443 bytes=599 interval=60s


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=671 interval=300s


ALLOW IN=141.244.69.80 OUT= PROTO=TCP DPT=443


Failed password for somchai from 209.141.56.12 port 44861 ssh2


Failed password for somchai from 209.141.56.12 port 57341 ssh2


Failed password for somchai from 209.141.56.12 port 50539 ssh2


Failed password for somchai from 209.141.56.12 port 54728 ssh2


Failed password for somchai from 209.141.56.12 port 55161 ssh2


Failed password for somchai from 209.141.56.12 port 40100 ssh2


Failed password for somchai from 209.141.56.12 port 48716 ssh2


Failed password for somchai from 209.141.56.12 port 46330 ssh2


Failed password for somchai from 209.141.56.12 port 44688 ssh2


Failed password for somchai from 209.141.56.12 port 41934 ssh2


Failed password for somchai from 209.141.56.12 port 48080 ssh2


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=268 interval=300s


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=555 interval=300s


24.137.15.170 - - "GET /health HTTP/1.1" 200 3152


Accepted password for root from 10.0.3.148 port 58011 ssh2


CONN src=10.0.1.101 dst=45.137.21.9 dport=443 bytes=626 interval=300s


ALLOW IN=136.128.176.251 OUT= PROTO=TCP DPT=443


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=366 interval=300s


ALLOW IN=158.207.160.251 OUT= PROTO=TCP DPT=443


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


CONN src=10.0.1.101 dst=45.137.21.9 dport=443 bytes=862 interval=300s


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=415 interval=300s


Accepted password for svc_backup from 10.0.3.183 port 52068 ssh2


136.30.72.183 - - "GET /api/products HTTP/1.1" 200 962


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash


CONN src=10.0.1.101 dst=45.137.21.9 dport=443 bytes=331 interval=300s


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=784 interval=300s


110.32.157.128 - - "GET /static/app.js HTTP/1.1" 200 7034


CONN src=10.0.1.101 dst=45.137.21.9 dport=443 bytes=341 interval=300s


Accepted password for deploy from 10.0.5.31 port 58480 ssh2


CONN src=10.0.5.22 dst=91.219.236.18 dport=443 bytes=295 interval=300s


185.220.101.34 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 12


Accepted password for guest from 10.0.0.72 port 47420 ssh2


CONN src=10.0.1.101 dst=45.137.21.9 dport=443 bytes=805 interval=300s


ALLOW IN=89.134.229.111 OUT= PROTO=TCP DPT=443


199.169.192.53 - - "GET /dashboard HTTP/1.1" 200 1709


ALLOW IN=51.159.7.142 OUT= PROTO=TCP DPT=443


Accepted password for nattapong from 10.0.3.251 port 46116 ssh2


ALLOW IN=144.93.218.240 OUT= PROTO=TCP DPT=80


193.27.228.114 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 200 71


ALLOW IN=175.38.30.160 OUT= PROTO=TCP DPT=443


ALLOW IN=47.128.89.55 OUT= PROTO=TCP DPT=443


Failed password for nattapong from 193.27.228.114 port 47214 ssh2


Accepted password for guest from 10.0.0.179 port 53324 ssh2


Failed password for nattapong from 193.27.228.114 port 59280 ssh2


Failed password for nattapong from 193.27.228.114 port 46840 ssh2


Failed password for nattapong from 193.27.228.114 port 41298 ssh2


Failed password for nattapong from 193.27.228.114 port 53794 ssh2


Failed password for nattapong from 193.27.228.114 port 55543 ssh2


Failed password for nattapong from 193.27.228.114 port 58144 ssh2


Failed password for nattapong from 193.27.228.114 port 54343 ssh2


Failed password for nattapong from 193.27.228.114 port 51733 ssh2


Failed password for nattapong from 193.27.228.114 port 42364 ssh2


Failed password for nattapong from 193.27.228.114 port 44906 ssh2


Failed password for nattapong from 193.27.228.114 port 40529 ssh2


Accepted password for www-data from 10.0.5.198 port 50955 ssh2


ALLOW IN=140.255.46.222 OUT= PROTO=TCP DPT=443


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=124.253.86.154 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for root from 10.0.1.110 port 51399 ssh2


Accepted password for admin from 10.0.3.49 port 45972 ssh2


ALLOW IN=183.99.172.174 OUT= PROTO=TCP DPT=80


OUTBOUND src=10.0.3.184 dst=91.219.236.18 bytes=3802136576 proto=TCP dport=443 duration=503s


172.242.29.37 - - "GET /dashboard HTTP/1.1" 200 6131


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Accepted password for admin from 10.0.1.190 port 49322 ssh2


214.204.204.253 - - "GET /api/orders?page=2 HTTP/1.1" 200 4181


Failed password for deploy from 209.141.56.12 port 51036 ssh2


Failed password for deploy from 209.141.56.12 port 46588 ssh2


Failed password for deploy from 209.141.56.12 port 49470 ssh2


Failed password for deploy from 209.141.56.12 port 50498 ssh2


Failed password for deploy from 209.141.56.12 port 42440 ssh2


Failed password for deploy from 209.141.56.12 port 58444 ssh2


Failed password for deploy from 209.141.56.12 port 41026 ssh2


Failed password for deploy from 209.141.56.12 port 51871 ssh2


Failed password for deploy from 209.141.56.12 port 44902 ssh2


Failed password for deploy from 209.141.56.12 port 52058 ssh2


Failed password for deploy from 209.141.56.12 port 44799 ssh2


Failed password for deploy from 209.141.56.12 port 49371 ssh2


Failed password for deploy from 209.141.56.12 port 41907 ssh2


Failed password for deploy from 209.141.56.12 port 56075 ssh2


Failed password for deploy from 209.141.56.12 port 42983 ssh2


63.117.103.214 - - "GET /login HTTP/1.1" 200 7051


Failed password for deploy from 209.141.56.12 port 55326 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


ALLOW IN=123.71.241.211 OUT= PROTO=TCP DPT=443


195.178.208.31 - - "GET / HTTP/1.1" 200 3150


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/bash


185.220.101.34 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 434


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=201.244.242.206 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


79.30.49.29 - - "GET /login HTTP/1.1" 200 3828


Accepted password for oppa from 10.0.0.24 port 52583 ssh2


222.139.75.31 - - "GET /api/products HTTP/1.1" 200 7362


Accepted password for svc_backup from 10.0.5.124 port 59429 ssh2


209.234.235.230 - - "GET /static/app.js HTTP/1.1" 200 7261


ALLOW IN=181.67.228.45 OUT= PROTO=TCP DPT=80


Accepted password for guest from 10.0.4.216 port 42958 ssh2


Accepted password for guest from 10.0.0.149 port 53868 ssh2


Accepted password for svc_backup from 10.0.3.236 port 43715 ssh2


Accepted password for somchai from 10.0.5.81 port 59416 ssh2


44.203.245.169 - - "GET / HTTP/1.1" 200 5578


ALLOW IN=73.132.141.149 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.2.128 port 42186 ssh2


124.160.21.131 - - "GET /static/app.js HTTP/1.1" 200 7586


ALLOW IN=133.110.20.83 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.3.203 port 47477 ssh2


Accepted password for nattapong from 10.0.3.64 port 55227 ssh2


206.102.90.35 - - "GET /login HTTP/1.1" 200 2640


ALLOW IN=93.174.107.118 OUT= PROTO=TCP DPT=443


133.54.70.215 - - "GET /health HTTP/1.1" 200 2257


211.74.185.122 - - "GET /api/orders?page=2 HTTP/1.1" 200 3212


CONN src=10.0.5.13 dst=91.219.236.18 dport=443 bytes=272 interval=60s


CONN src=10.0.5.13 dst=91.219.236.18 dport=443 bytes=685 interval=60s


CONN src=10.0.5.13 dst=91.219.236.18 dport=443 bytes=280 interval=60s


CONN src=10.0.5.13 dst=91.219.236.18 dport=443 bytes=632 interval=60s


164.55.167.137 - - "GET /api/products HTTP/1.1" 200 2783


CONN src=10.0.5.13 dst=91.219.236.18 dport=443 bytes=899 interval=60s


Accepted password for svc_backup from 10.0.3.150 port 47287 ssh2


185.97.67.80 - - "GET / HTTP/1.1" 200 3307


ALLOW IN=97.164.56.36 OUT= PROTO=TCP DPT=80


ALLOW IN=159.65.49.252 OUT= PROTO=TCP DPT=443


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


Accepted password for nattapong from 10.0.5.33 port 52381 ssh2


Failed password for deploy from 45.137.21.9 port 44259 ssh2


Failed password for deploy from 45.137.21.9 port 42816 ssh2


Failed password for deploy from 45.137.21.9 port 43906 ssh2


Failed password for deploy from 45.137.21.9 port 51359 ssh2


Failed password for deploy from 45.137.21.9 port 55004 ssh2


Failed password for deploy from 45.137.21.9 port 41375 ssh2


Failed password for deploy from 45.137.21.9 port 41638 ssh2


Failed password for deploy from 45.137.21.9 port 58114 ssh2


Failed password for deploy from 45.137.21.9 port 41621 ssh2


Failed password for deploy from 45.137.21.9 port 49546 ssh2


Failed password for deploy from 45.137.21.9 port 42422 ssh2


Failed password for deploy from 45.137.21.9 port 41181 ssh2


Failed password for deploy from 45.137.21.9 port 47390 ssh2


ALLOW IN=189.39.35.177 OUT= PROTO=TCP DPT=443


152.156.55.1 - - "GET / HTTP/1.1" 200 1755


190.192.1.94 - - "GET /login HTTP/1.1" 200 311


180.83.104.183 - - "GET /dashboard HTTP/1.1" 200 1084


91.219.236.18 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 457


ALLOW IN=157.209.3.99 OUT= PROTO=TCP DPT=80


OUTBOUND src=10.0.3.160 dst=185.220.101.34 bytes=6418333696 proto=TCP dport=443 duration=546s


CONN src=10.0.5.141 dst=209.141.56.12 dport=443 bytes=283 interval=30s


Accepted password for nattapong from 10.0.3.76 port 46000 ssh2


201.206.232.62 - - "GET /static/app.js HTTP/1.1" 200 1111


CONN src=10.0.5.141 dst=209.141.56.12 dport=443 bytes=752 interval=30s


CONN src=10.0.5.141 dst=209.141.56.12 dport=443 bytes=224 interval=30s


Accepted password for root from 10.0.0.195 port 57254 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


CONN src=10.0.5.141 dst=209.141.56.12 dport=443 bytes=897 interval=30s


168.190.115.235 - - "GET /health HTTP/1.1" 200 892


CONN src=10.0.5.141 dst=209.141.56.12 dport=443 bytes=414 interval=30s


CONN src=10.0.5.141 dst=209.141.56.12 dport=443 bytes=802 interval=30s


Accepted password for svc_backup from 10.0.2.35 port 43365 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


ALLOW IN=159.202.225.80 OUT= PROTO=TCP DPT=443


43.94.46.239 - - "GET /health HTTP/1.1" 200 756


56.42.193.207 - - "GET /api/products HTTP/1.1" 200 2300


ALLOW IN=99.10.178.184 OUT= PROTO=TCP DPT=80


97.187.117.142 - - "GET /api/orders?page=2 HTTP/1.1" 200 4519


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


Failed password for somchai from 45.137.21.9 port 44903 ssh2


Failed password for somchai from 45.137.21.9 port 43702 ssh2


Failed password for somchai from 45.137.21.9 port 45772 ssh2


Failed password for somchai from 45.137.21.9 port 50502 ssh2


Failed password for somchai from 45.137.21.9 port 46399 ssh2


Failed password for somchai from 45.137.21.9 port 46630 ssh2


Failed password for somchai from 45.137.21.9 port 48541 ssh2


Failed password for somchai from 45.137.21.9 port 49985 ssh2


Failed password for somchai from 45.137.21.9 port 52533 ssh2


Failed password for somchai from 45.137.21.9 port 45446 ssh2


Failed password for somchai from 45.137.21.9 port 49647 ssh2


Failed password for somchai from 45.137.21.9 port 40049 ssh2


Failed password for somchai from 45.137.21.9 port 54510 ssh2


Failed password for somchai from 45.137.21.9 port 57680 ssh2


Failed password for somchai from 45.137.21.9 port 56664 ssh2


Failed password for somchai from 45.137.21.9 port 40384 ssh2


Failed password for somchai from 45.137.21.9 port 55224 ssh2


Accepted password for somchai from 45.137.21.9 port 51234 ssh2


Failed password for somchai from 45.137.21.9 port 56992 ssh2


Failed password for somchai from 45.137.21.9 port 59009 ssh2


Accepted password for guest from 10.0.1.34 port 44446 ssh2


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=222.235.9.80 OUT= PROTO=TCP DPT=22 FLAGS=SYN


Accepted password for www-data from 10.0.3.138 port 43548 ssh2


Accepted password for deploy from 10.0.3.97 port 49806 ssh2


ALLOW IN=63.253.182.230 OUT= PROTO=TCP DPT=80


ALLOW IN=15.44.32.42 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.5.233 port 45423 ssh2


15.254.76.168 - - "GET /api/orders?page=2 HTTP/1.1" 200 207


Failed password for root from 135.224.150.139 port 58569 ssh2


Failed password for root from 135.224.150.139 port 57813 ssh2


Failed password for root from 135.224.150.139 port 50606 ssh2


Failed password for root from 135.224.150.139 port 57404 ssh2


Failed password for root from 135.224.150.139 port 54725 ssh2


Failed password for root from 135.224.150.139 port 59617 ssh2


Failed password for root from 135.224.150.139 port 55348 ssh2


Failed password for root from 135.224.150.139 port 51930 ssh2


Failed password for root from 135.224.150.139 port 45254 ssh2


Failed password for root from 135.224.150.139 port 48629 ssh2


Failed password for root from 135.224.150.139 port 40023 ssh2


Failed password for root from 135.224.150.139 port 46079 ssh2


Failed password for root from 135.224.150.139 port 52029 ssh2


Failed password for root from 135.224.150.139 port 42075 ssh2


Failed password for root from 135.224.150.139 port 56579 ssh2


Failed password for root from 135.224.150.139 port 46221 ssh2


Failed password for root from 135.224.150.139 port 47824 ssh2


Failed password for root from 135.224.150.139 port 53428 ssh2


Accepted password for root from 135.224.150.139 port 51234 ssh2


Failed password for root from 135.224.150.139 port 57660 ssh2


Failed password for root from 135.224.150.139 port 56303 ssh2


Failed password for root from 135.224.150.139 port 45050 ssh2


Failed password for root from 135.224.150.139 port 49277 ssh2


Failed password for root from 135.224.150.139 port 50552 ssh2


Failed password for nattapong from 45.137.21.9 port 59676 ssh2


Failed password for nattapong from 45.137.21.9 port 50883 ssh2


Failed password for nattapong from 45.137.21.9 port 49187 ssh2


Failed password for nattapong from 45.137.21.9 port 47450 ssh2


Failed password for nattapong from 45.137.21.9 port 58465 ssh2


Failed password for nattapong from 45.137.21.9 port 46265 ssh2


Failed password for nattapong from 45.137.21.9 port 40575 ssh2


Failed password for nattapong from 45.137.21.9 port 45032 ssh2


Failed password for nattapong from 45.137.21.9 port 50117 ssh2


Failed password for nattapong from 45.137.21.9 port 56825 ssh2


Failed password for nattapong from 45.137.21.9 port 49361 ssh2


Failed password for nattapong from 45.137.21.9 port 54418 ssh2


Failed password for nattapong from 45.137.21.9 port 51880 ssh2


Failed password for nattapong from 45.137.21.9 port 55067 ssh2


Failed password for nattapong from 45.137.21.9 port 48759 ssh2


Failed password for nattapong from 45.137.21.9 port 54312 ssh2


Accepted password for nattapong from 45.137.21.9 port 51234 ssh2


Failed password for nattapong from 45.137.21.9 port 51970 ssh2


Failed password for nattapong from 45.137.21.9 port 57127 ssh2


Failed password for nattapong from 45.137.21.9 port 45209 ssh2


169.80.38.67 - - "GET /static/app.js HTTP/1.1" 200 5145


ALLOW IN=141.168.214.171 OUT= PROTO=TCP DPT=443


ALLOW IN=101.91.162.189 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.0.212 port 52785 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


58.254.237.169 - - "GET /dashboard HTTP/1.1" 200 6620


209.141.56.12 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 332


ALLOW IN=170.41.71.243 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=703 interval=30s


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=275 interval=30s


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=790 interval=30s


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=844 interval=30s


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=254 interval=30s


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=355 interval=30s


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=352 interval=30s


144.53.113.1 - - "GET /static/app.js HTTP/1.1" 200 7386


CONN src=10.0.0.212 dst=91.219.236.18 dport=443 bytes=776 interval=30s


Accepted password for guest from 10.0.2.253 port 57053 ssh2


190.78.105.178 - - "GET /api/orders?page=2 HTTP/1.1" 200 5363


Accepted password for guest from 10.0.0.116 port 41492 ssh2


Accepted password for oppa from 10.0.5.62 port 45041 ssh2


ALLOW IN=63.104.108.109 OUT= PROTO=TCP DPT=443


209.141.56.12 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 143


Accepted password for root from 10.0.0.76 port 44945 ssh2


Accepted password for postgres from 10.0.4.97 port 46254 ssh2


148.216.187.157 - - "GET /api/products HTTP/1.1" 200 5775


ALLOW IN=108.2.168.24 OUT= PROTO=TCP DPT=443


76.4.238.231 - - "GET /api/products HTTP/1.1" 200 5750


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


116.145.170.33 - - "GET /login HTTP/1.1" 200 2692


ALLOW IN=74.221.199.7 OUT= PROTO=TCP DPT=443


153.48.205.86 - - "GET /health HTTP/1.1" 200 6999


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


ALLOW IN=55.25.128.230 OUT= PROTO=TCP DPT=80


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


108.83.204.117 - - "GET / HTTP/1.1" 200 7939


Accepted password for svc_backup from 10.0.5.22 port 54738 ssh2


Failed password for postgres from 209.141.56.12 port 48288 ssh2


Failed password for postgres from 209.141.56.12 port 44200 ssh2


Failed password for postgres from 209.141.56.12 port 48152 ssh2


Failed password for postgres from 209.141.56.12 port 41317 ssh2


Failed password for postgres from 209.141.56.12 port 46041 ssh2


Failed password for postgres from 209.141.56.12 port 48191 ssh2


Failed password for postgres from 209.141.56.12 port 59012 ssh2


Failed password for postgres from 209.141.56.12 port 47147 ssh2


Accepted password for svc_backup from 10.0.3.183 port 45072 ssh2


Failed password for postgres from 209.141.56.12 port 41525 ssh2


Failed password for postgres from 209.141.56.12 port 43690 ssh2


Failed password for postgres from 209.141.56.12 port 42365 ssh2


Failed password for postgres from 209.141.56.12 port 52934 ssh2


Failed password for postgres from 209.141.56.12 port 40092 ssh2


Failed password for postgres from 209.141.56.12 port 46887 ssh2


Accepted password for deploy from 10.0.3.24 port 48746 ssh2


Failed password for svc_backup from 193.27.228.114 port 41081 ssh2


Failed password for svc_backup from 193.27.228.114 port 48451 ssh2


Failed password for svc_backup from 193.27.228.114 port 52487 ssh2


Failed password for svc_backup from 193.27.228.114 port 50977 ssh2


Failed password for svc_backup from 193.27.228.114 port 54178 ssh2


Failed password for svc_backup from 193.27.228.114 port 44865 ssh2


Failed password for svc_backup from 193.27.228.114 port 55236 ssh2


Failed password for svc_backup from 193.27.228.114 port 51233 ssh2


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=551 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=870 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=768 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=528 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=472 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=889 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=354 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=303 interval=30s


106.12.164.110 - - "GET /health HTTP/1.1" 200 3332


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=895 interval=30s


CONN src=10.0.3.172 dst=193.27.228.114 dport=443 bytes=727 interval=30s


Failed password for admin from 193.27.228.114 port 59869 ssh2


Failed password for admin from 193.27.228.114 port 59602 ssh2


Failed password for admin from 193.27.228.114 port 48311 ssh2


Failed password for admin from 193.27.228.114 port 41491 ssh2


Failed password for admin from 193.27.228.114 port 58335 ssh2


Failed password for admin from 193.27.228.114 port 59021 ssh2


Failed password for admin from 193.27.228.114 port 48529 ssh2


Failed password for admin from 193.27.228.114 port 52933 ssh2


Failed password for admin from 193.27.228.114 port 56506 ssh2


Failed password for admin from 193.27.228.114 port 52482 ssh2


Failed password for admin from 193.27.228.114 port 50397 ssh2


Failed password for admin from 193.27.228.114 port 52153 ssh2


Failed password for admin from 193.27.228.114 port 56358 ssh2


Failed password for admin from 193.27.228.114 port 51114 ssh2


Failed password for admin from 193.27.228.114 port 44322 ssh2


Failed password for admin from 193.27.228.114 port 44646 ssh2


Failed password for admin from 193.27.228.114 port 43828 ssh2


Failed password for admin from 193.27.228.114 port 41447 ssh2


Failed password for admin from 193.27.228.114 port 51815 ssh2


Failed password for admin from 193.27.228.114 port 49270 ssh2


Failed password for admin from 193.27.228.114 port 57380 ssh2


Failed password for admin from 193.27.228.114 port 48642 ssh2


Failed password for svc_backup from 45.137.21.9 port 40944 ssh2


Failed password for svc_backup from 45.137.21.9 port 59771 ssh2


Failed password for svc_backup from 45.137.21.9 port 43692 ssh2


Failed password for svc_backup from 45.137.21.9 port 52696 ssh2


Failed password for svc_backup from 45.137.21.9 port 56770 ssh2


Failed password for svc_backup from 45.137.21.9 port 46704 ssh2


Failed password for svc_backup from 45.137.21.9 port 46736 ssh2


Failed password for svc_backup from 45.137.21.9 port 58684 ssh2


Failed password for admin from 193.27.228.114 port 50256 ssh2


Failed password for svc_backup from 45.137.21.9 port 47530 ssh2


Failed password for svc_backup from 45.137.21.9 port 56747 ssh2


Failed password for svc_backup from 45.137.21.9 port 50154 ssh2


Failed password for svc_backup from 45.137.21.9 port 47091 ssh2


Failed password for svc_backup from 45.137.21.9 port 55197 ssh2


Failed password for svc_backup from 45.137.21.9 port 49784 ssh2


Failed password for svc_backup from 45.137.21.9 port 47023 ssh2


Failed password for svc_backup from 45.137.21.9 port 49940 ssh2


Failed password for svc_backup from 45.137.21.9 port 48268 ssh2


Accepted password for somchai from 10.0.4.27 port 53334 ssh2


OUTBOUND src=10.0.3.249 dst=45.137.21.9 bytes=1523580928 proto=TCP dport=443 duration=256s


172.220.134.249 - - "GET /api/products HTTP/1.1" 200 631


52.218.104.187 - - "GET /login HTTP/1.1" 200 3160


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 132


ALLOW IN=41.226.200.41 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for guest from 10.0.4.188 port 54909 ssh2


Accepted password for oppa from 10.0.4.243 port 51631 ssh2


ALLOW IN=177.84.28.73 OUT= PROTO=TCP DPT=80


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=88.142.127.206 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


82.141.5.133 - - "GET /login HTTP/1.1" 200 901


Accepted password for postgres from 10.0.5.5 port 55029 ssh2


Accepted password for guest from 10.0.5.61 port 54362 ssh2


Accepted password for postgres from 10.0.5.198 port 50702 ssh2


Accepted password for guest from 10.0.3.197 port 53228 ssh2


OUTBOUND src=10.0.5.25 dst=185.220.101.34 bytes=4262461440 proto=TCP dport=443 duration=366s


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for root from 10.0.0.231 port 54042 ssh2


Accepted password for somchai from 10.0.2.210 port 57291 ssh2


ALLOW IN=14.35.185.53 OUT= PROTO=TCP DPT=443


51.86.112.219 - - "GET /static/app.js HTTP/1.1" 200 5483


ALLOW IN=65.10.100.104 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.0.167 port 58274 ssh2


Accepted password for root from 10.0.1.181 port 49353 ssh2


209.141.56.12 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 310


160.142.81.108 - - "GET /api/products HTTP/1.1" 200 460


Accepted password for root from 10.0.5.37 port 52416 ssh2


27.217.240.137 - - "GET /dashboard HTTP/1.1" 200 5455


Accepted password for www-data from 10.0.4.63 port 53879 ssh2


ALLOW IN=55.173.125.46 OUT= PROTO=TCP DPT=80


ALLOW IN=108.190.55.173 OUT= PROTO=TCP DPT=80


ALLOW IN=42.252.238.243 OUT= PROTO=TCP DPT=80


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


OUTBOUND src=10.0.0.88 dst=45.137.21.9 bytes=4143972352 proto=TCP dport=443 duration=327s


Accepted password for www-data from 10.0.0.39 port 43634 ssh2


Accepted password for somchai from 10.0.4.199 port 57933 ssh2


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 406


Accepted password for oppa from 10.0.5.196 port 40318 ssh2


OUTBOUND src=10.0.3.236 dst=193.27.228.114 bytes=2449473536 proto=TCP dport=443 duration=229s


ALLOW IN=172.139.193.235 OUT= PROTO=TCP DPT=443


56.222.36.121 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 410


ALLOW IN=134.98.126.72 OUT= PROTO=TCP DPT=443


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Accepted password for deploy from 10.0.4.33 port 52403 ssh2


ALLOW IN=23.86.165.13 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.4.209 port 49080 ssh2


Accepted password for deploy from 10.0.0.127 port 46575 ssh2


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 54


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


94.197.166.173 - - "GET /health HTTP/1.1" 200 3881


Accepted password for svc_backup from 10.0.0.11 port 46190 ssh2


ALLOW IN=145.213.242.49 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.3.127 dst=45.137.21.9 bytes=5249171456 proto=TCP dport=443 duration=567s


185.220.101.34 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 200 49


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for root from 10.0.4.184 port 52014 ssh2


88.5.133.168 - - "GET /api/products HTTP/1.1" 200 5875


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=777 interval=300s


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=891 interval=300s


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/usr/bin/passwd root


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=475 interval=300s


ALLOW IN=61.151.117.170 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.4.166 port 53474 ssh2


Accepted password for admin from 10.0.3.187 port 49126 ssh2


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=711 interval=300s


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=538 interval=300s


Failed password for svc_backup from 185.220.101.34 port 52878 ssh2


Failed password for svc_backup from 185.220.101.34 port 59485 ssh2


Failed password for svc_backup from 185.220.101.34 port 54119 ssh2


Failed password for svc_backup from 185.220.101.34 port 49186 ssh2


Failed password for svc_backup from 185.220.101.34 port 42591 ssh2


Failed password for svc_backup from 185.220.101.34 port 52527 ssh2


Failed password for svc_backup from 185.220.101.34 port 51247 ssh2


Failed password for svc_backup from 185.220.101.34 port 57546 ssh2


Failed password for svc_backup from 185.220.101.34 port 52122 ssh2


Failed password for svc_backup from 185.220.101.34 port 50587 ssh2


Failed password for svc_backup from 185.220.101.34 port 43697 ssh2


Failed password for svc_backup from 185.220.101.34 port 40443 ssh2


Failed password for svc_backup from 185.220.101.34 port 47851 ssh2


Failed password for svc_backup from 185.220.101.34 port 46074 ssh2


Failed password for svc_backup from 185.220.101.34 port 40259 ssh2


Failed password for svc_backup from 185.220.101.34 port 59527 ssh2


Failed password for svc_backup from 185.220.101.34 port 50880 ssh2


Failed password for svc_backup from 185.220.101.34 port 58865 ssh2


Failed password for svc_backup from 185.220.101.34 port 50038 ssh2


Failed password for svc_backup from 185.220.101.34 port 53011 ssh2


Failed password for svc_backup from 185.220.101.34 port 42868 ssh2


Failed password for svc_backup from 185.220.101.34 port 54636 ssh2


Failed password for svc_backup from 185.220.101.34 port 49049 ssh2


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/passwd root


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=664 interval=300s


ALLOW IN=41.87.114.12 OUT= PROTO=TCP DPT=80


ALLOW IN=26.77.49.22 OUT= PROTO=TCP DPT=443


ALLOW IN=117.192.231.20 OUT= PROTO=TCP DPT=80


Failed password for admin from 91.219.236.18 port 42092 ssh2


Failed password for admin from 91.219.236.18 port 58895 ssh2


Failed password for admin from 91.219.236.18 port 56371 ssh2


Failed password for admin from 91.219.236.18 port 42525 ssh2


Failed password for admin from 91.219.236.18 port 54915 ssh2


Failed password for admin from 91.219.236.18 port 56673 ssh2


Failed password for admin from 91.219.236.18 port 41443 ssh2


Failed password for admin from 91.219.236.18 port 51800 ssh2


Failed password for admin from 91.219.236.18 port 48013 ssh2


Failed password for admin from 91.219.236.18 port 55458 ssh2


Failed password for admin from 91.219.236.18 port 45154 ssh2


Failed password for admin from 91.219.236.18 port 45864 ssh2


Failed password for admin from 91.219.236.18 port 43371 ssh2


Failed password for admin from 91.219.236.18 port 45468 ssh2


Failed password for admin from 91.219.236.18 port 43779 ssh2


Failed password for admin from 91.219.236.18 port 52549 ssh2


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=611 interval=300s


79.252.74.17 - - "GET /login HTTP/1.1" 200 3760


ALLOW IN=104.14.164.27 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.201 dst=185.220.101.34 dport=443 bytes=800 interval=300s


209.141.56.12 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 201


26.56.94.88 - - "GET /api/orders?page=2 HTTP/1.1" 200 5934


27.202.249.103 - - "GET /health HTTP/1.1" 200 6178


ALLOW IN=217.247.238.112 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.0.177 port 57968 ssh2


Failed password for www-data from 209.141.56.12 port 47539 ssh2


Failed password for www-data from 209.141.56.12 port 48432 ssh2


Failed password for www-data from 209.141.56.12 port 55487 ssh2


Failed password for www-data from 209.141.56.12 port 43359 ssh2


Failed password for www-data from 209.141.56.12 port 54292 ssh2


Failed password for www-data from 209.141.56.12 port 49315 ssh2


Failed password for www-data from 209.141.56.12 port 58416 ssh2


Failed password for www-data from 209.141.56.12 port 57262 ssh2


Failed password for www-data from 209.141.56.12 port 52573 ssh2


Failed password for www-data from 209.141.56.12 port 51141 ssh2


Failed password for www-data from 209.141.56.12 port 48336 ssh2


Failed password for www-data from 209.141.56.12 port 49436 ssh2


Failed password for www-data from 209.141.56.12 port 58927 ssh2


Failed password for www-data from 209.141.56.12 port 41221 ssh2


Failed password for www-data from 209.141.56.12 port 54242 ssh2


Failed password for www-data from 209.141.56.12 port 58655 ssh2


Failed password for www-data from 209.141.56.12 port 40682 ssh2


Failed password for www-data from 209.141.56.12 port 48814 ssh2


Failed password for www-data from 209.141.56.12 port 45344 ssh2


Failed password for www-data from 209.141.56.12 port 44376 ssh2


Failed password for www-data from 209.141.56.12 port 50805 ssh2


Failed password for www-data from 209.141.56.12 port 40270 ssh2


Failed password for www-data from 209.141.56.12 port 57139 ssh2


Failed password for www-data from 209.141.56.12 port 52229 ssh2


Failed password for www-data from 209.141.56.12 port 48912 ssh2


Failed password for admin from 187.117.31.106 port 47690 ssh2


Failed password for admin from 187.117.31.106 port 50245 ssh2


Failed password for admin from 187.117.31.106 port 57834 ssh2


Failed password for admin from 187.117.31.106 port 40472 ssh2


Failed password for admin from 187.117.31.106 port 50158 ssh2


Failed password for admin from 187.117.31.106 port 49716 ssh2


Failed password for admin from 187.117.31.106 port 41009 ssh2


Failed password for admin from 187.117.31.106 port 49159 ssh2


Failed password for admin from 187.117.31.106 port 48796 ssh2


Failed password for admin from 187.117.31.106 port 52053 ssh2


Failed password for admin from 187.117.31.106 port 59691 ssh2


Failed password for admin from 187.117.31.106 port 48871 ssh2


Failed password for admin from 187.117.31.106 port 54392 ssh2


Failed password for admin from 187.117.31.106 port 51502 ssh2


Accepted password for admin from 187.117.31.106 port 51234 ssh2


Failed password for admin from 187.117.31.106 port 42977 ssh2


Accepted password for postgres from 10.0.5.110 port 58339 ssh2


Failed password for guest from 185.220.101.34 port 46699 ssh2


Failed password for guest from 185.220.101.34 port 52165 ssh2


Failed password for guest from 185.220.101.34 port 59808 ssh2


Failed password for guest from 185.220.101.34 port 55470 ssh2


Failed password for guest from 185.220.101.34 port 57182 ssh2


Failed password for guest from 185.220.101.34 port 46901 ssh2


Failed password for guest from 185.220.101.34 port 50410 ssh2


Failed password for guest from 185.220.101.34 port 44434 ssh2


Failed password for guest from 185.220.101.34 port 55417 ssh2


Failed password for guest from 185.220.101.34 port 40183 ssh2


Failed password for guest from 185.220.101.34 port 43075 ssh2


Failed password for guest from 185.220.101.34 port 55358 ssh2


Failed password for guest from 185.220.101.34 port 45872 ssh2


Failed password for guest from 185.220.101.34 port 51483 ssh2


Failed password for guest from 185.220.101.34 port 51303 ssh2


Failed password for guest from 185.220.101.34 port 55527 ssh2


Failed password for guest from 185.220.101.34 port 48997 ssh2


Failed password for guest from 185.220.101.34 port 46149 ssh2


Failed password for guest from 185.220.101.34 port 43103 ssh2


Failed password for guest from 185.220.101.34 port 55027 ssh2


Failed password for guest from 185.220.101.34 port 53964 ssh2


Failed password for guest from 185.220.101.34 port 45126 ssh2


Failed password for guest from 185.220.101.34 port 58322 ssh2


Failed password for guest from 185.220.101.34 port 40462 ssh2


Accepted password for deploy from 10.0.5.243 port 40273 ssh2


ALLOW IN=179.184.55.5 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.1.42 port 48871 ssh2


80.136.50.66 - - "GET /api/orders?page=2 HTTP/1.1" 200 4985


ALLOW IN=147.114.80.17 OUT= PROTO=TCP DPT=80


Accepted password for admin from 10.0.2.43 port 55037 ssh2


216.156.83.41 - - "GET /static/app.js HTTP/1.1" 200 4613


Accepted password for root from 10.0.4.61 port 49796 ssh2


ALLOW IN=113.182.243.171 OUT= PROTO=TCP DPT=443


134.241.124.117 - - "GET /static/app.js HTTP/1.1" 200 1384


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=612 interval=30s


42.194.202.210 - - "GET /api/products HTTP/1.1" 200 6532


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=720 interval=30s


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=526 interval=30s


Accepted password for somchai from 10.0.2.40 port 51192 ssh2


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=833 interval=30s


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=419 interval=30s


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=715 interval=30s


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=241 interval=30s


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=604 interval=30s


CONN src=10.0.2.92 dst=193.27.228.114 dport=443 bytes=361 interval=30s


171.149.34.179 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 210


123.114.86.74 - - "GET /api/products HTTP/1.1" 200 5165


OUTBOUND src=10.0.4.110 dst=209.141.56.12 bytes=7520387072 proto=TCP dport=443 duration=553s


23.129.1.111 - - "GET /dashboard HTTP/1.1" 200 1499


31.152.231.224 - - "GET /dashboard HTTP/1.1" 200 4498


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


41.63.231.44 - - "GET /static/app.js HTTP/1.1" 200 2877


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


ALLOW IN=192.234.141.23 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.2.49 port 55096 ssh2


ALLOW IN=133.203.22.179 OUT= PROTO=TCP DPT=443


Failed password for www-data from 193.27.228.114 port 57060 ssh2


Failed password for www-data from 193.27.228.114 port 53013 ssh2


Failed password for www-data from 193.27.228.114 port 56761 ssh2


Failed password for www-data from 193.27.228.114 port 43352 ssh2


Failed password for www-data from 193.27.228.114 port 52262 ssh2


Failed password for www-data from 193.27.228.114 port 44912 ssh2


Failed password for www-data from 193.27.228.114 port 43542 ssh2


Failed password for www-data from 193.27.228.114 port 59456 ssh2


Failed password for www-data from 193.27.228.114 port 59661 ssh2


Failed password for www-data from 193.27.228.114 port 42091 ssh2


Failed password for www-data from 193.27.228.114 port 49262 ssh2


Failed password for www-data from 193.27.228.114 port 49059 ssh2


Failed password for www-data from 193.27.228.114 port 48557 ssh2


Failed password for www-data from 193.27.228.114 port 50654 ssh2


Failed password for www-data from 193.27.228.114 port 50472 ssh2


Failed password for www-data from 193.27.228.114 port 49790 ssh2


Failed password for www-data from 193.27.228.114 port 48500 ssh2


Failed password for www-data from 193.27.228.114 port 47874 ssh2


Failed password for www-data from 193.27.228.114 port 53257 ssh2


Failed password for www-data from 193.27.228.114 port 44585 ssh2


Failed password for www-data from 193.27.228.114 port 40834 ssh2


Failed password for www-data from 193.27.228.114 port 56297 ssh2


Accepted password for www-data from 10.0.2.142 port 50703 ssh2


ALLOW IN=166.252.221.28 OUT= PROTO=TCP DPT=80


ALLOW IN=141.79.48.10 OUT= PROTO=TCP DPT=443


137.65.116.162 - - "GET /login HTTP/1.1" 200 1403


ALLOW IN=128.6.214.29 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=799 interval=300s


59.21.175.214 - - "GET /static/app.js HTTP/1.1" 200 1207


Accepted password for admin from 10.0.0.20 port 51804 ssh2


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=888 interval=300s


ALLOW IN=136.129.245.130 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=355 interval=300s


22.185.163.65 - - "GET /static/app.js HTTP/1.1" 200 795


ALLOW IN=32.127.145.200 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=410 interval=300s


91.219.236.18 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 139


ALLOW IN=139.252.87.142 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=654 interval=300s


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=345 interval=300s


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


ALLOW IN=151.90.21.247 OUT= PROTO=TCP DPT=443


138.204.165.84 - - "GET /health HTTP/1.1" 200 6414


209.141.56.12 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 500 190


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=888 interval=300s


Accepted password for deploy from 10.0.2.155 port 40341 ssh2


Accepted password for oppa from 10.0.5.110 port 51149 ssh2


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=482 interval=300s


ALLOW IN=105.232.249.84 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=618 interval=60s


Accepted password for postgres from 10.0.5.2 port 53733 ssh2


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=790 interval=60s


ALLOW IN=11.34.239.13 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=434 interval=60s


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=696 interval=60s


209.141.56.12 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 164


ALLOW IN=66.78.74.234 OUT= PROTO=TCP DPT=443


ALLOW IN=182.59.181.206 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=551 interval=60s


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=535 interval=300s


133.29.70.236 - - "GET /api/orders?page=2 HTTP/1.1" 200 7535


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=518 interval=60s


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=246 interval=60s


CONN src=10.0.0.167 dst=185.220.101.34 dport=443 bytes=338 interval=60s


Failed password for oppa from 193.27.228.114 port 55840 ssh2


Failed password for oppa from 193.27.228.114 port 54648 ssh2


Failed password for oppa from 193.27.228.114 port 43078 ssh2


Failed password for oppa from 193.27.228.114 port 58993 ssh2


Failed password for oppa from 193.27.228.114 port 52327 ssh2


Failed password for oppa from 193.27.228.114 port 53998 ssh2


Failed password for oppa from 193.27.228.114 port 59985 ssh2


Failed password for oppa from 193.27.228.114 port 55556 ssh2


Failed password for oppa from 193.27.228.114 port 51464 ssh2


CONN src=10.0.3.33 dst=193.27.228.114 dport=443 bytes=211 interval=300s


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for deploy from 10.0.3.205 port 41909 ssh2


ALLOW IN=102.142.87.42 OUT= PROTO=TCP DPT=443


53.70.252.181 - - "GET /api/products HTTP/1.1" 200 4379


ALLOW IN=172.173.216.247 OUT= PROTO=TCP DPT=443


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Failed password for oppa from 209.141.56.12 port 58863 ssh2


Failed password for oppa from 209.141.56.12 port 59817 ssh2


Failed password for oppa from 209.141.56.12 port 45508 ssh2


Failed password for oppa from 209.141.56.12 port 55512 ssh2


Failed password for oppa from 209.141.56.12 port 47596 ssh2


Failed password for oppa from 209.141.56.12 port 42992 ssh2


Failed password for oppa from 209.141.56.12 port 45400 ssh2


Failed password for oppa from 209.141.56.12 port 44488 ssh2


Failed password for oppa from 209.141.56.12 port 58354 ssh2


Failed password for oppa from 209.141.56.12 port 40008 ssh2


Failed password for oppa from 209.141.56.12 port 44800 ssh2


Failed password for oppa from 209.141.56.12 port 42548 ssh2


Failed password for oppa from 209.141.56.12 port 55456 ssh2


Failed password for oppa from 209.141.56.12 port 49914 ssh2


Failed password for oppa from 209.141.56.12 port 52363 ssh2


Failed password for oppa from 209.141.56.12 port 54407 ssh2


Failed password for oppa from 209.141.56.12 port 55547 ssh2


Failed password for oppa from 209.141.56.12 port 50215 ssh2


Failed password for oppa from 209.141.56.12 port 43843 ssh2


Failed password for oppa from 209.141.56.12 port 50386 ssh2


Failed password for nattapong from 209.141.56.12 port 43429 ssh2


Failed password for nattapong from 209.141.56.12 port 50202 ssh2


Failed password for nattapong from 209.141.56.12 port 50111 ssh2


Failed password for nattapong from 209.141.56.12 port 47432 ssh2


Failed password for nattapong from 209.141.56.12 port 41684 ssh2


Failed password for nattapong from 209.141.56.12 port 46502 ssh2


Failed password for nattapong from 209.141.56.12 port 43355 ssh2


Failed password for nattapong from 209.141.56.12 port 41227 ssh2


Failed password for nattapong from 209.141.56.12 port 57555 ssh2


Failed password for nattapong from 209.141.56.12 port 47606 ssh2


Failed password for nattapong from 209.141.56.12 port 50574 ssh2


Failed password for nattapong from 209.141.56.12 port 43730 ssh2


Failed password for nattapong from 209.141.56.12 port 52895 ssh2


Failed password for nattapong from 209.141.56.12 port 53869 ssh2


Failed password for nattapong from 209.141.56.12 port 54627 ssh2


Failed password for nattapong from 209.141.56.12 port 59717 ssh2


Failed password for nattapong from 209.141.56.12 port 53970 ssh2


Failed password for nattapong from 209.141.56.12 port 54349 ssh2


Failed password for nattapong from 209.141.56.12 port 53500 ssh2


Failed password for nattapong from 209.141.56.12 port 58825 ssh2


Failed password for nattapong from 209.141.56.12 port 41751 ssh2


Failed password for nattapong from 209.141.56.12 port 40810 ssh2


Failed password for nattapong from 209.141.56.12 port 49914 ssh2


Failed password for nattapong from 209.141.56.12 port 48749 ssh2


Failed password for nattapong from 209.141.56.12 port 49565 ssh2


163.203.203.176 - - "GET /static/app.js HTTP/1.1" 200 2211


76.7.57.155 - - "GET /login HTTP/1.1" 200 7655


Accepted password for postgres from 10.0.2.105 port 56668 ssh2


153.191.198.41 - - "GET /health HTTP/1.1" 200 1851


CONN src=10.0.2.59 dst=185.220.101.34 dport=443 bytes=327 interval=300s


Accepted password for www-data from 10.0.5.184 port 51944 ssh2


202.159.60.153 - - "GET /dashboard HTTP/1.1" 200 6132


CONN src=10.0.2.59 dst=185.220.101.34 dport=443 bytes=770 interval=300s


Failed password for oppa from 193.27.228.114 port 55555 ssh2


Failed password for oppa from 193.27.228.114 port 59312 ssh2


Failed password for oppa from 193.27.228.114 port 54406 ssh2


Failed password for oppa from 193.27.228.114 port 51626 ssh2


Failed password for oppa from 193.27.228.114 port 56850 ssh2


Failed password for oppa from 193.27.228.114 port 53355 ssh2


Failed password for oppa from 193.27.228.114 port 50298 ssh2


Failed password for oppa from 193.27.228.114 port 43516 ssh2


Failed password for oppa from 193.27.228.114 port 55266 ssh2


Failed password for oppa from 193.27.228.114 port 53896 ssh2


Failed password for oppa from 193.27.228.114 port 57030 ssh2


Failed password for oppa from 193.27.228.114 port 56246 ssh2


Failed password for oppa from 193.27.228.114 port 50751 ssh2


Failed password for oppa from 193.27.228.114 port 58150 ssh2


Failed password for oppa from 193.27.228.114 port 55586 ssh2


Failed password for oppa from 193.27.228.114 port 49446 ssh2


Failed password for oppa from 193.27.228.114 port 43791 ssh2


Failed password for oppa from 193.27.228.114 port 49293 ssh2


Failed password for oppa from 193.27.228.114 port 59673 ssh2


Failed password for oppa from 193.27.228.114 port 41330 ssh2


Failed password for oppa from 193.27.228.114 port 49522 ssh2


Failed password for oppa from 193.27.228.114 port 46186 ssh2


Failed password for oppa from 193.27.228.114 port 50223 ssh2


Failed password for oppa from 193.27.228.114 port 54547 ssh2


Accepted password for admin from 10.0.1.107 port 53925 ssh2


CONN src=10.0.2.59 dst=185.220.101.34 dport=443 bytes=216 interval=300s


Accepted password for guest from 10.0.0.18 port 46943 ssh2


Failed password for postgres from 193.27.228.114 port 55143 ssh2


Failed password for postgres from 193.27.228.114 port 59358 ssh2


Failed password for postgres from 193.27.228.114 port 50746 ssh2


Failed password for postgres from 193.27.228.114 port 56937 ssh2


Failed password for postgres from 193.27.228.114 port 48740 ssh2


Failed password for postgres from 193.27.228.114 port 52280 ssh2


Failed password for postgres from 193.27.228.114 port 45969 ssh2


Failed password for postgres from 193.27.228.114 port 44684 ssh2


Failed password for postgres from 193.27.228.114 port 45304 ssh2


Failed password for postgres from 193.27.228.114 port 58746 ssh2


Failed password for postgres from 193.27.228.114 port 44758 ssh2


Failed password for postgres from 193.27.228.114 port 41121 ssh2


Failed password for postgres from 193.27.228.114 port 52616 ssh2


Failed password for postgres from 193.27.228.114 port 41573 ssh2


Failed password for postgres from 193.27.228.114 port 50568 ssh2


Failed password for postgres from 193.27.228.114 port 55854 ssh2


Failed password for postgres from 193.27.228.114 port 41117 ssh2


CONN src=10.0.2.59 dst=185.220.101.34 dport=443 bytes=845 interval=300s


CONN src=10.0.2.59 dst=185.220.101.34 dport=443 bytes=774 interval=300s


112.207.80.222 - - "GET /login HTTP/1.1" 200 5091


189.99.201.25 - - "GET /login HTTP/1.1" 200 2849


154.246.36.86 - - "GET /login HTTP/1.1" 200 6056


Accepted password for somchai from 10.0.3.157 port 55447 ssh2


ALLOW IN=41.212.1.226 OUT= PROTO=TCP DPT=80


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/bin/bash


83.196.197.151 - - "GET /static/app.js HTTP/1.1" 200 6071


ALLOW IN=151.104.210.119 OUT= PROTO=TCP DPT=80


ALLOW IN=90.213.236.230 OUT= PROTO=TCP DPT=443


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash