Failed password for guest from 181.106.242.100 port 44002 ssh2


Failed password for guest from 181.106.242.100 port 49047 ssh2


Failed password for guest from 181.106.242.100 port 41376 ssh2


Failed password for guest from 181.106.242.100 port 49791 ssh2


Failed password for guest from 181.106.242.100 port 40493 ssh2


Failed password for guest from 181.106.242.100 port 47965 ssh2


Failed password for guest from 181.106.242.100 port 54226 ssh2


Accepted password for guest from 181.106.242.100 port 51234 ssh2


Failed password for guest from 181.106.242.100 port 43920 ssh2


Failed password for guest from 181.106.242.100 port 55573 ssh2


Failed password for guest from 181.106.242.100 port 59536 ssh2


108.172.123.155 - - "GET /dashboard HTTP/1.1" 200 481


ALLOW IN=22.216.189.212 OUT= PROTO=TCP DPT=80


196.154.140.82 - - "GET /health HTTP/1.1" 200 3032


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=737 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=208 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=210 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=389 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=413 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=227 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=230 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=800 interval=60s


CONN src=10.0.4.221 dst=91.219.236.18 dport=443 bytes=309 interval=60s


184.255.105.161 - - "GET /health HTTP/1.1" 200 1698


ALLOW IN=42.17.5.78 OUT= PROTO=TCP DPT=443


114.168.22.67 - - "GET /dashboard HTTP/1.1" 200 1220


Accepted password for guest from 10.0.3.204 port 55270 ssh2


Accepted password for postgres from 10.0.1.152 port 46554 ssh2


ALLOW IN=200.190.66.143 OUT= PROTO=TCP DPT=80


ALLOW IN=53.85.22.107 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.3.208 port 40787 ssh2


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/bin/bash


155.246.169.222 - - "GET / HTTP/1.1" 200 1194


69.68.153.250 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 373


91.219.236.18 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 366


Accepted password for root from 10.0.1.25 port 45275 ssh2


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.186.203.187 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


ALLOW IN=35.60.122.93 OUT= PROTO=TCP DPT=443


67.113.228.96 - - "GET /dashboard HTTP/1.1" 200 3993


47.211.165.67 - - "GET /dashboard HTTP/1.1" 200 7913


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


179.158.206.6 - - "GET / HTTP/1.1" 200 4846


140.34.138.142 - - "GET /static/app.js HTTP/1.1" 200 7135


Accepted password for admin from 10.0.0.168 port 40538 ssh2


193.27.228.114 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 500 240


Accepted password for deploy from 10.0.0.118 port 43740 ssh2


ALLOW IN=173.235.3.25 OUT= PROTO=TCP DPT=443


151.201.108.234 - - "GET /dashboard HTTP/1.1" 200 5675


Accepted password for somchai from 10.0.2.202 port 47508 ssh2


Accepted password for svc_backup from 10.0.1.25 port 53758 ssh2


Accepted password for nattapong from 10.0.0.204 port 58297 ssh2


Accepted password for oppa from 10.0.1.170 port 51553 ssh2


Accepted password for svc_backup from 10.0.5.129 port 41231 ssh2


58.129.251.94 - - "GET /api/products HTTP/1.1" 200 2693


106.27.179.120 - - "GET /dashboard HTTP/1.1" 200 7466


ALLOW IN=119.42.78.247 OUT= PROTO=TCP DPT=80


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


ALLOW IN=40.126.177.171 OUT= PROTO=TCP DPT=80


ALLOW IN=77.205.64.235 OUT= PROTO=TCP DPT=80


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/passwd root


ALLOW IN=105.231.9.156 OUT= PROTO=TCP DPT=80


ALLOW IN=54.23.84.48 OUT= PROTO=TCP DPT=80


Failed password for oppa from 54.76.121.168 port 52655 ssh2


Failed password for oppa from 54.76.121.168 port 49282 ssh2


Failed password for oppa from 54.76.121.168 port 58266 ssh2


Failed password for oppa from 54.76.121.168 port 40143 ssh2


Failed password for oppa from 54.76.121.168 port 51557 ssh2


Failed password for oppa from 54.76.121.168 port 52156 ssh2


Failed password for oppa from 54.76.121.168 port 50611 ssh2


Failed password for oppa from 54.76.121.168 port 59026 ssh2


Accepted password for postgres from 10.0.2.164 port 51070 ssh2


ALLOW IN=199.170.68.12 OUT= PROTO=TCP DPT=443


138.188.135.208 - - "GET /api/orders?page=2 HTTP/1.1" 200 6742


133.35.184.202 - - "GET /static/app.js HTTP/1.1" 200 3651


Accepted password for oppa from 10.0.0.32 port 41045 ssh2


Accepted password for svc_backup from 10.0.3.179 port 56235 ssh2


ALLOW IN=69.178.114.120 OUT= PROTO=TCP DPT=443


187.223.115.44 - - "GET / HTTP/1.1" 200 1765


Accepted password for admin from 10.0.1.141 port 40469 ssh2


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Accepted password for deploy from 10.0.3.82 port 53320 ssh2


Accepted password for svc_backup from 10.0.5.124 port 59916 ssh2


50.14.41.118 - - "GET /health HTTP/1.1" 200 5997


72.238.62.69 - - "GET /dashboard HTTP/1.1" 200 2230


Accepted password for oppa from 10.0.3.203 port 44302 ssh2


194.132.52.9 - - "GET / HTTP/1.1" 200 776


89.0.157.73 - - "GET /login HTTP/1.1" 200 6338


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


Accepted password for admin from 10.0.2.200 port 45215 ssh2


143.199.217.252 - - "GET /health HTTP/1.1" 200 4438


Accepted password for somchai from 10.0.2.114 port 53381 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


ALLOW IN=121.254.247.172 OUT= PROTO=TCP DPT=80


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


CONN src=10.0.0.87 dst=209.141.56.12 dport=443 bytes=574 interval=30s


CONN src=10.0.0.87 dst=209.141.56.12 dport=443 bytes=711 interval=30s


OUTBOUND src=10.0.2.66 dst=193.27.228.114 bytes=7479492608 proto=TCP dport=443 duration=310s


CONN src=10.0.0.87 dst=209.141.56.12 dport=443 bytes=840 interval=30s


CONN src=10.0.0.87 dst=209.141.56.12 dport=443 bytes=409 interval=30s


CONN src=10.0.0.87 dst=209.141.56.12 dport=443 bytes=516 interval=30s


Failed password for postgres from 185.220.101.34 port 51264 ssh2


Failed password for postgres from 185.220.101.34 port 42918 ssh2


Failed password for postgres from 185.220.101.34 port 44619 ssh2


Failed password for postgres from 185.220.101.34 port 47115 ssh2


Failed password for postgres from 185.220.101.34 port 58245 ssh2


Failed password for postgres from 185.220.101.34 port 40192 ssh2


Failed password for postgres from 185.220.101.34 port 48295 ssh2


Failed password for postgres from 185.220.101.34 port 57731 ssh2


Failed password for postgres from 185.220.101.34 port 48981 ssh2


Failed password for postgres from 185.220.101.34 port 48410 ssh2


Failed password for postgres from 185.220.101.34 port 58081 ssh2


Failed password for postgres from 185.220.101.34 port 44012 ssh2


Failed password for postgres from 185.220.101.34 port 48951 ssh2


Failed password for postgres from 185.220.101.34 port 53338 ssh2


Failed password for postgres from 185.220.101.34 port 58478 ssh2


Failed password for postgres from 185.220.101.34 port 42469 ssh2


Failed password for postgres from 185.220.101.34 port 48638 ssh2


ALLOW IN=22.37.181.244 OUT= PROTO=TCP DPT=443


Failed password for postgres from 185.220.101.34 port 56369 ssh2


Failed password for postgres from 185.220.101.34 port 58547 ssh2


CONN src=10.0.3.101 dst=91.219.236.18 dport=443 bytes=343 interval=60s


CONN src=10.0.3.101 dst=91.219.236.18 dport=443 bytes=385 interval=60s


193.27.228.114 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 52


CONN src=10.0.3.101 dst=91.219.236.18 dport=443 bytes=325 interval=60s


CONN src=10.0.3.101 dst=91.219.236.18 dport=443 bytes=570 interval=60s


CONN src=10.0.3.101 dst=91.219.236.18 dport=443 bytes=255 interval=60s


Accepted password for admin from 10.0.2.156 port 50992 ssh2


ALLOW IN=219.194.167.127 OUT= PROTO=TCP DPT=80


209.13.108.187 - - "GET /login HTTP/1.1" 200 3150


ALLOW IN=167.42.205.10 OUT= PROTO=TCP DPT=443


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


160.157.13.153 - - "GET /dashboard HTTP/1.1" 200 2375


ALLOW IN=74.82.21.18 OUT= PROTO=TCP DPT=443


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


Accepted password for admin from 10.0.2.93 port 42499 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


OUTBOUND src=10.0.3.108 dst=45.137.21.9 bytes=7216300032 proto=TCP dport=443 duration=159s


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for nattapong from 10.0.4.75 port 49653 ssh2


64.156.233.62 - - "GET /api/products HTTP/1.1" 200 6831


Accepted password for admin from 10.0.0.231 port 41169 ssh2


ALLOW IN=108.62.146.44 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.5.43 port 44587 ssh2


Accepted password for root from 10.0.3.49 port 42739 ssh2


Accepted password for oppa from 10.0.4.11 port 52098 ssh2


Failed password for deploy from 45.137.21.9 port 50039 ssh2


Failed password for deploy from 45.137.21.9 port 53338 ssh2


Failed password for deploy from 45.137.21.9 port 44741 ssh2


Failed password for deploy from 45.137.21.9 port 49880 ssh2


Failed password for deploy from 45.137.21.9 port 51814 ssh2


Failed password for deploy from 45.137.21.9 port 43042 ssh2


Failed password for deploy from 45.137.21.9 port 44317 ssh2


Failed password for deploy from 45.137.21.9 port 44720 ssh2


Failed password for deploy from 45.137.21.9 port 59258 ssh2


Failed password for deploy from 45.137.21.9 port 40557 ssh2


Failed password for deploy from 45.137.21.9 port 45984 ssh2


Failed password for deploy from 45.137.21.9 port 45933 ssh2


Failed password for deploy from 45.137.21.9 port 44277 ssh2


Failed password for deploy from 45.137.21.9 port 53019 ssh2


Failed password for deploy from 45.137.21.9 port 42696 ssh2


Failed password for deploy from 45.137.21.9 port 54617 ssh2


Failed password for deploy from 45.137.21.9 port 45907 ssh2


Failed password for deploy from 45.137.21.9 port 40740 ssh2


Failed password for deploy from 45.137.21.9 port 51571 ssh2


Failed password for deploy from 45.137.21.9 port 43092 ssh2


Failed password for deploy from 45.137.21.9 port 48899 ssh2


Failed password for deploy from 45.137.21.9 port 53401 ssh2


Accepted password for deploy from 45.137.21.9 port 51234 ssh2


209.141.56.12 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 483


OUTBOUND src=10.0.3.221 dst=209.141.56.12 bytes=1470103552 proto=TCP dport=443 duration=235s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=650 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=337 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=817 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=852 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=200 interval=60s


ALLOW IN=106.78.222.140 OUT= PROTO=TCP DPT=443


ALLOW IN=112.215.106.228 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=518 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=687 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=680 interval=60s


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=649 interval=60s


CONN src=10.0.3.253 dst=91.219.236.18 dport=443 bytes=463 interval=60s


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=564 interval=60s


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=793 interval=60s


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=733 interval=60s


210.108.225.75 - - "GET / HTTP/1.1" 200 7909


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=406 interval=60s


157.12.233.94 - - "GET /health HTTP/1.1" 200 2463


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=879 interval=60s


Failed password for postgres from 134.40.72.187 port 55235 ssh2


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=403 interval=60s


Failed password for postgres from 134.40.72.187 port 42563 ssh2


Failed password for postgres from 134.40.72.187 port 48035 ssh2


Failed password for postgres from 134.40.72.187 port 59990 ssh2


Failed password for postgres from 134.40.72.187 port 42558 ssh2


Failed password for postgres from 134.40.72.187 port 55363 ssh2


ALLOW IN=171.103.141.27 OUT= PROTO=TCP DPT=443


Failed password for postgres from 134.40.72.187 port 57668 ssh2


Failed password for postgres from 134.40.72.187 port 41157 ssh2


Failed password for postgres from 134.40.72.187 port 57531 ssh2


Failed password for postgres from 134.40.72.187 port 50239 ssh2


Failed password for postgres from 134.40.72.187 port 56798 ssh2


Failed password for postgres from 134.40.72.187 port 41729 ssh2


Failed password for postgres from 134.40.72.187 port 58807 ssh2


Failed password for postgres from 134.40.72.187 port 51564 ssh2


Failed password for postgres from 134.40.72.187 port 49476 ssh2


Failed password for postgres from 134.40.72.187 port 50863 ssh2


Failed password for postgres from 134.40.72.187 port 42012 ssh2


Failed password for postgres from 134.40.72.187 port 59583 ssh2


Failed password for postgres from 134.40.72.187 port 49963 ssh2


Failed password for postgres from 134.40.72.187 port 58471 ssh2


Failed password for postgres from 134.40.72.187 port 55504 ssh2


CONN src=10.0.4.148 dst=45.137.21.9 dport=443 bytes=363 interval=60s


Failed password for postgres from 134.40.72.187 port 45540 ssh2


Failed password for postgres from 134.40.72.187 port 41691 ssh2


Failed password for postgres from 134.40.72.187 port 49560 ssh2


41.78.255.239 - - "GET /api/orders?page=2 HTTP/1.1" 200 2590


75.37.99.108 - - "GET /api/products HTTP/1.1" 200 2374


Accepted password for www-data from 10.0.3.45 port 57189 ssh2


Accepted password for root from 10.0.3.21 port 53959 ssh2


Accepted password for nattapong from 10.0.5.248 port 47642 ssh2


176.26.52.98 - - "GET /api/orders?page=2 HTTP/1.1" 200 7170


Accepted password for svc_backup from 10.0.0.192 port 43151 ssh2


Accepted password for oppa from 10.0.3.19 port 46008 ssh2


ALLOW IN=130.64.199.232 OUT= PROTO=TCP DPT=443


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


ALLOW IN=72.227.209.93 OUT= PROTO=TCP DPT=80


CONN src=10.0.4.50 dst=91.219.236.18 dport=443 bytes=646 interval=60s


CONN src=10.0.4.50 dst=91.219.236.18 dport=443 bytes=201 interval=60s


92.35.106.2 - - "GET /api/products HTTP/1.1" 200 2984


CONN src=10.0.4.50 dst=91.219.236.18 dport=443 bytes=732 interval=60s


CONN src=10.0.4.50 dst=91.219.236.18 dport=443 bytes=751 interval=60s


CONN src=10.0.4.50 dst=91.219.236.18 dport=443 bytes=886 interval=60s


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/usr/bin/passwd root


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=36.84.71.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for svc_backup from 10.0.5.156 port 52095 ssh2


56.203.202.186 - - "GET / HTTP/1.1" 200 1972


28.195.112.174 - - "GET /api/orders?page=2 HTTP/1.1" 200 2083


Accepted password for svc_backup from 10.0.4.34 port 54447 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/bash


CONN src=10.0.4.179 dst=193.27.228.114 dport=443 bytes=768 interval=30s


CONN src=10.0.4.179 dst=193.27.228.114 dport=443 bytes=657 interval=30s


CONN src=10.0.4.179 dst=193.27.228.114 dport=443 bytes=521 interval=30s


CONN src=10.0.4.179 dst=193.27.228.114 dport=443 bytes=325 interval=30s


CONN src=10.0.4.179 dst=193.27.228.114 dport=443 bytes=240 interval=30s


Accepted password for somchai from 10.0.4.116 port 44862 ssh2


40.54.254.51 - - "GET /static/app.js HTTP/1.1" 200 1836


Accepted password for admin from 10.0.2.103 port 46437 ssh2


Accepted password for www-data from 10.0.3.131 port 44862 ssh2


89.81.207.176 - - "GET /static/app.js HTTP/1.1" 200 7762


ALLOW IN=86.180.100.174 OUT= PROTO=TCP DPT=80


ALLOW IN=69.212.169.185 OUT= PROTO=TCP DPT=80


32.22.77.46 - - "GET /dashboard HTTP/1.1" 200 4545


Accepted password for oppa from 10.0.5.38 port 47424 ssh2


Failed password for nattapong from 185.220.101.34 port 48676 ssh2


Failed password for nattapong from 185.220.101.34 port 57840 ssh2


Failed password for nattapong from 185.220.101.34 port 45158 ssh2


Failed password for nattapong from 185.220.101.34 port 46403 ssh2


Failed password for nattapong from 185.220.101.34 port 43812 ssh2


Failed password for nattapong from 185.220.101.34 port 50378 ssh2


Failed password for nattapong from 185.220.101.34 port 46995 ssh2


Failed password for nattapong from 185.220.101.34 port 58565 ssh2


Failed password for nattapong from 185.220.101.34 port 41829 ssh2


83.24.38.182 - - "GET /login HTTP/1.1" 200 875


ALLOW IN=80.190.211.5 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.5.105 port 41059 ssh2


45.137.21.9 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 335


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


CONN src=10.0.4.189 dst=185.220.101.34 dport=443 bytes=465 interval=300s


CONN src=10.0.4.189 dst=185.220.101.34 dport=443 bytes=366 interval=300s


63.188.205.62 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 374


CONN src=10.0.4.189 dst=185.220.101.34 dport=443 bytes=795 interval=300s


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=754 interval=60s


ALLOW IN=45.93.93.108 OUT= PROTO=TCP DPT=443


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=352 interval=60s


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=446 interval=60s


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=801 interval=60s


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=518 interval=60s


CONN src=10.0.4.189 dst=185.220.101.34 dport=443 bytes=259 interval=300s


218.117.13.2 - - "GET /static/app.js HTTP/1.1" 200 5058


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=721 interval=60s


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=478 interval=60s


CONN src=10.0.1.200 dst=185.220.101.34 dport=443 bytes=841 interval=60s


ALLOW IN=68.249.132.88 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.0.117 port 49894 ssh2


CONN src=10.0.4.189 dst=185.220.101.34 dport=443 bytes=349 interval=300s


ALLOW IN=217.81.102.98 OUT= PROTO=TCP DPT=80


209.141.56.12 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 486


Failed password for postgres from 176.12.224.124 port 53054 ssh2


Failed password for postgres from 176.12.224.124 port 41307 ssh2


Failed password for postgres from 176.12.224.124 port 53088 ssh2


Failed password for postgres from 176.12.224.124 port 44783 ssh2


Failed password for postgres from 176.12.224.124 port 45536 ssh2


Failed password for postgres from 176.12.224.124 port 56762 ssh2


Failed password for postgres from 176.12.224.124 port 44065 ssh2


Failed password for postgres from 176.12.224.124 port 54419 ssh2


Failed password for postgres from 176.12.224.124 port 58999 ssh2


169.52.14.58 - - "GET / HTTP/1.1" 200 6962


134.196.32.164 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 79


91.219.236.18 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 235


146.182.85.37 - - "GET / HTTP/1.1" 200 850


Accepted password for svc_backup from 10.0.5.144 port 46557 ssh2


ALLOW IN=120.233.186.239 OUT= PROTO=TCP DPT=80


Accepted password for guest from 10.0.2.226 port 54154 ssh2


ALLOW IN=71.99.165.183 OUT= PROTO=TCP DPT=443


ALLOW IN=174.146.55.139 OUT= PROTO=TCP DPT=443


205.249.221.196 - - "GET /static/app.js HTTP/1.1" 200 496


Accepted password for deploy from 10.0.2.3 port 54100 ssh2


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


OUTBOUND src=10.0.4.188 dst=193.27.228.114 bytes=8044675072 proto=TCP dport=443 duration=373s


Failed password for root from 209.141.56.12 port 47412 ssh2


Failed password for root from 209.141.56.12 port 43571 ssh2


Failed password for root from 209.141.56.12 port 42461 ssh2


Failed password for root from 209.141.56.12 port 41014 ssh2


Failed password for root from 209.141.56.12 port 44868 ssh2


Failed password for root from 209.141.56.12 port 55908 ssh2


Failed password for root from 209.141.56.12 port 46449 ssh2


Failed password for root from 209.141.56.12 port 43760 ssh2


Failed password for root from 209.141.56.12 port 47473 ssh2


Failed password for root from 209.141.56.12 port 47289 ssh2


Failed password for root from 209.141.56.12 port 47111 ssh2


Failed password for root from 209.141.56.12 port 59390 ssh2


Failed password for root from 209.141.56.12 port 55256 ssh2


Failed password for root from 209.141.56.12 port 57396 ssh2


Failed password for root from 209.141.56.12 port 44952 ssh2


Failed password for root from 209.141.56.12 port 49952 ssh2


71.219.124.159 - - "GET / HTTP/1.1" 200 690


20.10.134.150 - - "GET /login HTTP/1.1" 200 4655


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=548 interval=60s


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=242 interval=60s


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=730 interval=60s


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=421 interval=60s


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=711 interval=60s


ALLOW IN=87.186.87.109 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=490 interval=60s


ALLOW IN=66.215.42.224 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=581 interval=60s


ALLOW IN=201.232.78.19 OUT= PROTO=TCP DPT=443


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=612 interval=60s


CONN src=10.0.2.184 dst=209.141.56.12 dport=443 bytes=237 interval=60s


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/su -


198.161.193.245 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 371


Accepted password for admin from 10.0.3.36 port 51108 ssh2


ALLOW IN=88.108.154.165 OUT= PROTO=TCP DPT=443


ALLOW IN=48.252.220.229 OUT= PROTO=TCP DPT=443


203.16.110.32 - - "GET /health HTTP/1.1" 200 2089


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


Accepted password for guest from 10.0.2.210 port 54685 ssh2


Failed password for nattapong from 45.137.21.9 port 58071 ssh2


Failed password for nattapong from 45.137.21.9 port 49644 ssh2


Failed password for nattapong from 45.137.21.9 port 56246 ssh2


Failed password for nattapong from 45.137.21.9 port 56798 ssh2


Failed password for nattapong from 45.137.21.9 port 49210 ssh2


Failed password for nattapong from 45.137.21.9 port 46326 ssh2


Failed password for nattapong from 45.137.21.9 port 45667 ssh2


Failed password for nattapong from 45.137.21.9 port 55985 ssh2


Failed password for nattapong from 45.137.21.9 port 43371 ssh2


Failed password for nattapong from 45.137.21.9 port 45428 ssh2


Failed password for nattapong from 45.137.21.9 port 54619 ssh2


Failed password for nattapong from 45.137.21.9 port 59253 ssh2


Failed password for nattapong from 45.137.21.9 port 59540 ssh2


Failed password for nattapong from 45.137.21.9 port 43524 ssh2


Failed password for nattapong from 45.137.21.9 port 46544 ssh2


Failed password for nattapong from 45.137.21.9 port 42105 ssh2


Failed password for nattapong from 45.137.21.9 port 48902 ssh2


Failed password for nattapong from 45.137.21.9 port 52551 ssh2


Failed password for nattapong from 45.137.21.9 port 51564 ssh2


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 266


57.144.22.81 - - "GET /api/products HTTP/1.1" 200 5134


ALLOW IN=68.1.11.251 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.3.66 port 51924 ssh2


Failed password for nattapong from 156.116.140.50 port 57463 ssh2


Failed password for nattapong from 156.116.140.50 port 48287 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


Failed password for nattapong from 156.116.140.50 port 58353 ssh2


Failed password for nattapong from 156.116.140.50 port 40064 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Failed password for nattapong from 156.116.140.50 port 56983 ssh2


Failed password for nattapong from 156.116.140.50 port 41699 ssh2


Failed password for nattapong from 156.116.140.50 port 54173 ssh2


Failed password for nattapong from 156.116.140.50 port 48979 ssh2


45.178.135.202 - - "GET /login HTTP/1.1" 200 523


Accepted password for guest from 10.0.4.56 port 48850 ssh2


Accepted password for somchai from 10.0.0.47 port 52235 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/su -


217.97.237.241 - - "GET / HTTP/1.1" 200 1385


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=43.219.88.54 OUT= PROTO=TCP DPT=21 FLAGS=SYN


22.31.97.190 - - "GET /health HTTP/1.1" 200 3456


29.66.23.31 - - "GET /health HTTP/1.1" 200 4806


ALLOW IN=92.202.141.28 OUT= PROTO=TCP DPT=443


Failed password for guest from 91.219.236.18 port 45139 ssh2


Failed password for guest from 91.219.236.18 port 59713 ssh2


Failed password for guest from 91.219.236.18 port 52102 ssh2


Failed password for guest from 91.219.236.18 port 52110 ssh2


Failed password for guest from 91.219.236.18 port 43615 ssh2


Failed password for guest from 91.219.236.18 port 57130 ssh2


Failed password for guest from 91.219.236.18 port 43858 ssh2


Failed password for guest from 91.219.236.18 port 49489 ssh2


Failed password for guest from 91.219.236.18 port 49991 ssh2


ALLOW IN=83.174.191.207 OUT= PROTO=TCP DPT=80


45.137.21.9 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 204


Accepted password for nattapong from 10.0.0.97 port 52525 ssh2


179.94.56.179 - - "GET /login HTTP/1.1" 200 2275


Accepted password for nattapong from 10.0.4.168 port 43507 ssh2


CONN src=10.0.2.206 dst=209.141.56.12 dport=443 bytes=876 interval=30s


CONN src=10.0.2.206 dst=209.141.56.12 dport=443 bytes=226 interval=30s


CONN src=10.0.2.206 dst=209.141.56.12 dport=443 bytes=334 interval=30s


CONN src=10.0.2.206 dst=209.141.56.12 dport=443 bytes=215 interval=30s


CONN src=10.0.2.206 dst=209.141.56.12 dport=443 bytes=566 interval=30s


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Accepted password for deploy from 10.0.4.52 port 55986 ssh2


91.18.49.202 - - "GET / HTTP/1.1" 200 902


135.57.210.113 - - "GET / HTTP/1.1" 200 718


Accepted password for nattapong from 10.0.2.219 port 50322 ssh2


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 500


ALLOW IN=78.82.226.142 OUT= PROTO=TCP DPT=443


Accepted password for nattapong from 10.0.0.106 port 55204 ssh2


ALLOW IN=80.43.39.19 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.2.81 port 51880 ssh2


ALLOW IN=101.50.175.48 OUT= PROTO=TCP DPT=443


174.245.217.67 - - "GET /api/orders?page=2 HTTP/1.1" 200 2292


Accepted password for deploy from 10.0.0.118 port 50170 ssh2


OUTBOUND src=10.0.4.109 dst=91.219.236.18 bytes=3662675968 proto=TCP dport=443 duration=236s


99.215.227.189 - - "GET /api/orders?page=2 HTTP/1.1" 200 375


Accepted password for admin from 10.0.5.242 port 44833 ssh2


ALLOW IN=104.139.84.66 OUT= PROTO=TCP DPT=443


Failed password for deploy from 185.220.101.34 port 54025 ssh2


Failed password for deploy from 185.220.101.34 port 53770 ssh2


Failed password for deploy from 185.220.101.34 port 52165 ssh2


Failed password for deploy from 185.220.101.34 port 41311 ssh2


Failed password for deploy from 185.220.101.34 port 53265 ssh2


Failed password for deploy from 185.220.101.34 port 56657 ssh2


Failed password for deploy from 185.220.101.34 port 45239 ssh2


Failed password for deploy from 185.220.101.34 port 40079 ssh2


Failed password for deploy from 185.220.101.34 port 43423 ssh2


Failed password for deploy from 185.220.101.34 port 53488 ssh2


Failed password for deploy from 185.220.101.34 port 51692 ssh2


Failed password for deploy from 185.220.101.34 port 58798 ssh2


Failed password for deploy from 185.220.101.34 port 48757 ssh2


Failed password for deploy from 185.220.101.34 port 53223 ssh2


Failed password for deploy from 185.220.101.34 port 59497 ssh2


Failed password for deploy from 185.220.101.34 port 59208 ssh2


Failed password for deploy from 185.220.101.34 port 42325 ssh2


Failed password for deploy from 185.220.101.34 port 59619 ssh2


189.50.202.102 - - "GET /api/orders?page=2 HTTP/1.1" 200 4977


Failed password for deploy from 185.220.101.34 port 47129 ssh2


Failed password for deploy from 185.220.101.34 port 58701 ssh2


Failed password for deploy from 185.220.101.34 port 55872 ssh2


Failed password for deploy from 185.220.101.34 port 58819 ssh2


Failed password for deploy from 185.220.101.34 port 49102 ssh2


Failed password for deploy from 185.220.101.34 port 42535 ssh2


102.87.103.89 - - "GET /dashboard HTTP/1.1" 200 1090


OUTBOUND src=10.0.2.63 dst=185.220.101.34 bytes=6086983680 proto=TCP dport=443 duration=152s


Accepted password for guest from 10.0.5.119 port 54743 ssh2


ALLOW IN=214.24.166.129 OUT= PROTO=TCP DPT=80


Failed password for svc_backup from 209.141.56.12 port 45376 ssh2


Failed password for svc_backup from 209.141.56.12 port 47624 ssh2


Failed password for svc_backup from 209.141.56.12 port 45913 ssh2


Failed password for svc_backup from 209.141.56.12 port 47587 ssh2


Failed password for svc_backup from 209.141.56.12 port 53854 ssh2


Failed password for svc_backup from 209.141.56.12 port 46092 ssh2


Failed password for svc_backup from 209.141.56.12 port 40568 ssh2


Failed password for svc_backup from 209.141.56.12 port 49117 ssh2


Failed password for svc_backup from 209.141.56.12 port 47928 ssh2


Failed password for svc_backup from 209.141.56.12 port 57531 ssh2


ALLOW IN=190.200.5.96 OUT= PROTO=TCP DPT=80


66.231.158.138 - - "GET /api/orders?page=2 HTTP/1.1" 200 5726


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=113.167.144.210 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


ALLOW IN=11.243.2.231 OUT= PROTO=TCP DPT=80


Accepted password for admin from 10.0.1.64 port 56266 ssh2


ALLOW IN=50.228.224.199 OUT= PROTO=TCP DPT=443


ALLOW IN=29.166.211.212 OUT= PROTO=TCP DPT=80


OUTBOUND src=10.0.0.229 dst=185.220.101.34 bytes=1442840576 proto=TCP dport=443 duration=219s


100.106.133.217 - - "GET /dashboard HTTP/1.1" 200 7652


135.38.137.190 - - "GET /api/orders?page=2 HTTP/1.1" 200 4554


Failed password for oppa from 45.137.21.9 port 54861 ssh2


Failed password for oppa from 45.137.21.9 port 50500 ssh2


Accepted password for admin from 10.0.5.15 port 42235 ssh2


Failed password for oppa from 45.137.21.9 port 45790 ssh2


Failed password for oppa from 45.137.21.9 port 49743 ssh2


Failed password for oppa from 45.137.21.9 port 58485 ssh2


Failed password for oppa from 45.137.21.9 port 43175 ssh2


Failed password for oppa from 45.137.21.9 port 59270 ssh2


Failed password for oppa from 45.137.21.9 port 51177 ssh2


Failed password for oppa from 45.137.21.9 port 41374 ssh2


Failed password for oppa from 45.137.21.9 port 51381 ssh2


Failed password for oppa from 45.137.21.9 port 49347 ssh2


Failed password for oppa from 45.137.21.9 port 52585 ssh2


Failed password for oppa from 45.137.21.9 port 57209 ssh2


Failed password for oppa from 45.137.21.9 port 45846 ssh2


Failed password for oppa from 45.137.21.9 port 56653 ssh2


Failed password for oppa from 45.137.21.9 port 57011 ssh2


Failed password for oppa from 45.137.21.9 port 58846 ssh2


Accepted password for oppa from 45.137.21.9 port 51234 ssh2


Failed password for oppa from 45.137.21.9 port 46903 ssh2


Failed password for oppa from 45.137.21.9 port 50301 ssh2


ALLOW IN=164.92.29.217 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.2.12 port 41709 ssh2


ALLOW IN=87.201.76.29 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.3.41 port 44334 ssh2


52.27.139.93 - - "GET /dashboard HTTP/1.1" 200 5412


172.197.134.119 - - "GET /login HTTP/1.1" 200 410


ALLOW IN=47.3.241.105 OUT= PROTO=TCP DPT=80


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


Accepted password for oppa from 10.0.5.208 port 53626 ssh2


45.137.21.9 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 421


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/su -


29.199.191.2 - - "GET /dashboard HTTP/1.1" 200 739


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=112.65.48.169 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


ALLOW IN=214.75.205.176 OUT= PROTO=TCP DPT=80


182.237.248.119 - - "GET / HTTP/1.1" 200 876


ALLOW IN=35.20.158.202 OUT= PROTO=TCP DPT=443


91.219.236.18 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 380


Failed password for somchai from 91.219.236.18 port 59176 ssh2


Failed password for somchai from 91.219.236.18 port 56190 ssh2


Failed password for somchai from 91.219.236.18 port 40879 ssh2


Failed password for somchai from 91.219.236.18 port 45047 ssh2


Failed password for somchai from 91.219.236.18 port 55186 ssh2


Failed password for somchai from 91.219.236.18 port 49426 ssh2


Failed password for somchai from 91.219.236.18 port 49835 ssh2


Failed password for somchai from 91.219.236.18 port 45877 ssh2


Failed password for somchai from 91.219.236.18 port 55484 ssh2


Accepted password for svc_backup from 10.0.2.193 port 58246 ssh2


ALLOW IN=189.194.114.83 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.1.121 port 46808 ssh2


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=159.113.42.113 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Accepted password for admin from 10.0.2.218 port 43314 ssh2


ALLOW IN=92.165.198.194 OUT= PROTO=TCP DPT=443


79.90.83.37 - - "GET /static/app.js HTTP/1.1" 200 7925


86.197.94.201 - - "GET / HTTP/1.1" 200 991


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash


165.64.111.229 - - "GET /static/app.js HTTP/1.1" 200 3732


104.127.119.66 - - "GET /health HTTP/1.1" 200 2660


ALLOW IN=204.0.75.170 OUT= PROTO=TCP DPT=80


ALLOW IN=101.202.179.206 OUT= PROTO=TCP DPT=80


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


ALLOW IN=214.154.202.63 OUT= PROTO=TCP DPT=80


207.140.9.210 - - "GET /api/orders?page=2 HTTP/1.1" 200 1856


Accepted password for guest from 10.0.2.8 port 47242 ssh2


ALLOW IN=146.153.240.106 OUT= PROTO=TCP DPT=443


57.142.236.64 - - "GET /health HTTP/1.1" 200 7763


Accepted password for somchai from 10.0.2.149 port 51567 ssh2


93.127.3.67 - - "GET /dashboard HTTP/1.1" 200 2129


45.137.21.9 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 232


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/passwd root


ALLOW IN=216.145.125.44 OUT= PROTO=TCP DPT=80


ALLOW IN=70.101.188.140 OUT= PROTO=TCP DPT=80


ALLOW IN=141.47.168.1 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.1.69 port 43182 ssh2


Failed password for www-data from 155.8.94.243 port 42033 ssh2


Failed password for www-data from 155.8.94.243 port 54553 ssh2


Failed password for www-data from 155.8.94.243 port 51048 ssh2


Failed password for www-data from 155.8.94.243 port 54144 ssh2


Failed password for www-data from 155.8.94.243 port 43413 ssh2


Failed password for www-data from 155.8.94.243 port 42199 ssh2


Failed password for www-data from 155.8.94.243 port 40765 ssh2


Failed password for www-data from 155.8.94.243 port 59840 ssh2


Failed password for www-data from 155.8.94.243 port 41267 ssh2


Failed password for www-data from 155.8.94.243 port 46789 ssh2


Failed password for www-data from 155.8.94.243 port 43532 ssh2


Failed password for www-data from 155.8.94.243 port 55146 ssh2


Accepted password for www-data from 155.8.94.243 port 51234 ssh2


Failed password for www-data from 155.8.94.243 port 46841 ssh2


ALLOW IN=81.101.233.85 OUT= PROTO=TCP DPT=80


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


118.106.216.35 - - "GET /health HTTP/1.1" 200 4370


ALLOW IN=116.216.155.17 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.4.239 port 47529 ssh2


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=620 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=509 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=335 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=573 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=541 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=230 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=691 interval=30s


CONN src=10.0.0.84 dst=209.141.56.12 dport=443 bytes=770 interval=30s


Accepted password for somchai from 10.0.0.99 port 40112 ssh2


187.245.108.202 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 132


25.211.213.143 - - "GET /static/app.js HTTP/1.1" 200 1298


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=483 interval=30s


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=387 interval=30s


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=642 interval=30s


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=554 interval=30s


193.27.228.114 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 392


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=496 interval=30s


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=266 interval=30s


CONN src=10.0.3.207 dst=185.220.101.34 dport=443 bytes=647 interval=30s


170.117.169.218 - - "GET /login HTTP/1.1" 200 7417


Accepted password for svc_backup from 10.0.3.163 port 58731 ssh2


166.124.205.77 - - "GET /api/products HTTP/1.1" 200 578


107.51.49.86 - - "GET /static/app.js HTTP/1.1" 200 2458


ALLOW IN=221.230.101.166 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.2.147 dst=193.27.228.114 bytes=792723456 proto=TCP dport=443 duration=449s


Accepted password for guest from 10.0.3.146 port 45900 ssh2


Accepted password for guest from 10.0.2.148 port 51037 ssh2


Accepted password for www-data from 10.0.4.131 port 43154 ssh2


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 329


Accepted password for postgres from 10.0.2.211 port 42287 ssh2


35.20.69.226 - - "GET /dashboard HTTP/1.1" 200 4073


218.156.201.251 - - "GET /health HTTP/1.1" 200 6415


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/su -


185.76.148.160 - - "GET /static/app.js HTTP/1.1" 200 5642


162.183.75.112 - - "GET /api/orders?page=2 HTTP/1.1" 200 2379


184.7.214.84 - - "GET / HTTP/1.1" 200 3784


CONN src=10.0.2.83 dst=209.141.56.12 dport=443 bytes=289 interval=300s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=508 interval=30s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=324 interval=30s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=225 interval=30s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=614 interval=30s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=711 interval=30s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=348 interval=30s


43.21.157.94 - - "GET /health HTTP/1.1" 200 7250


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=669 interval=30s


45.138.26.165 - - "GET /login HTTP/1.1" 200 6945


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=527 interval=30s


CONN src=10.0.2.83 dst=209.141.56.12 dport=443 bytes=597 interval=300s


CONN src=10.0.3.140 dst=185.220.101.34 dport=443 bytes=359 interval=30s


CONN src=10.0.2.83 dst=209.141.56.12 dport=443 bytes=769 interval=300s


Accepted password for somchai from 10.0.1.11 port 55409 ssh2


CONN src=10.0.2.83 dst=209.141.56.12 dport=443 bytes=606 interval=300s


11.193.217.173 - - "GET /login HTTP/1.1" 200 4397


71.179.215.22 - - "GET /dashboard HTTP/1.1" 200 3557


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/su -


ALLOW IN=94.45.209.100 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


CONN src=10.0.2.83 dst=209.141.56.12 dport=443 bytes=765 interval=300s


ALLOW IN=158.85.178.170 OUT= PROTO=TCP DPT=80


ALLOW IN=132.254.90.41 OUT= PROTO=TCP DPT=80


ALLOW IN=62.109.247.44 OUT= PROTO=TCP DPT=443


206.40.39.246 - - "GET /login HTTP/1.1" 200 4831


166.61.100.92 - - "GET /dashboard HTTP/1.1" 200 3962


CONN src=10.0.2.98 dst=209.141.56.12 dport=443 bytes=805 interval=30s


CONN src=10.0.2.98 dst=209.141.56.12 dport=443 bytes=398 interval=30s


CONN src=10.0.2.98 dst=209.141.56.12 dport=443 bytes=575 interval=30s


CONN src=10.0.2.98 dst=209.141.56.12 dport=443 bytes=558 interval=30s


CONN src=10.0.2.98 dst=209.141.56.12 dport=443 bytes=589 interval=30s


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/bin/su -


Accepted password for deploy from 10.0.3.121 port 55298 ssh2


ALLOW IN=49.59.106.41 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.3.176 port 43564 ssh2


ALLOW IN=125.189.89.67 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.0.173 port 59170 ssh2


Accepted password for somchai from 10.0.3.175 port 58782 ssh2


Accepted password for oppa from 10.0.0.97 port 49701 ssh2


OUTBOUND src=10.0.0.122 dst=45.137.21.9 bytes=2048917504 proto=TCP dport=443 duration=93s


Accepted password for nattapong from 10.0.3.246 port 47712 ssh2


Accepted password for www-data from 10.0.0.138 port 53424 ssh2


20.64.169.223 - - "GET / HTTP/1.1" 200 7361


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/usr/bin/passwd root


Failed password for somchai from 91.219.236.18 port 55067 ssh2


Failed password for somchai from 91.219.236.18 port 41465 ssh2


Failed password for somchai from 91.219.236.18 port 40291 ssh2


Failed password for somchai from 91.219.236.18 port 57944 ssh2


Failed password for somchai from 91.219.236.18 port 57803 ssh2


Failed password for somchai from 91.219.236.18 port 41331 ssh2


Failed password for somchai from 91.219.236.18 port 51037 ssh2


Failed password for somchai from 91.219.236.18 port 40755 ssh2


Failed password for somchai from 91.219.236.18 port 55729 ssh2


Failed password for somchai from 91.219.236.18 port 54239 ssh2


Failed password for somchai from 91.219.236.18 port 52730 ssh2


Failed password for somchai from 91.219.236.18 port 43171 ssh2


Failed password for somchai from 91.219.236.18 port 57150 ssh2


Failed password for somchai from 91.219.236.18 port 50431 ssh2


Failed password for somchai from 91.219.236.18 port 59796 ssh2


Failed password for somchai from 91.219.236.18 port 58786 ssh2


Failed password for somchai from 91.219.236.18 port 59316 ssh2


Failed password for somchai from 91.219.236.18 port 42702 ssh2


Failed password for somchai from 91.219.236.18 port 49087 ssh2


Failed password for somchai from 91.219.236.18 port 47180 ssh2


Failed password for somchai from 91.219.236.18 port 56424 ssh2


Failed password for somchai from 91.219.236.18 port 48005 ssh2


Failed password for somchai from 91.219.236.18 port 44917 ssh2


Failed password for somchai from 91.219.236.18 port 52103 ssh2


Failed password for somchai from 91.219.236.18 port 48491 ssh2


98.172.148.233 - - "GET /dashboard HTTP/1.1" 200 4469


184.194.62.236 - - "GET /api/products HTTP/1.1" 200 6655


ALLOW IN=132.34.46.213 OUT= PROTO=TCP DPT=80


ALLOW IN=30.90.252.119 OUT= PROTO=TCP DPT=443


148.184.114.37 - - "GET /api/products HTTP/1.1" 200 5419


ALLOW IN=199.90.67.22 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.3.124 port 41201 ssh2


ALLOW IN=126.189.190.114 OUT= PROTO=TCP DPT=80


45.137.21.9 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 49


Accepted password for somchai from 10.0.3.202 port 59647 ssh2


Failed password for nattapong from 209.141.56.12 port 43383 ssh2


Failed password for nattapong from 209.141.56.12 port 55558 ssh2


Failed password for nattapong from 209.141.56.12 port 45133 ssh2


Failed password for nattapong from 209.141.56.12 port 57925 ssh2


Failed password for nattapong from 209.141.56.12 port 50616 ssh2


Failed password for nattapong from 209.141.56.12 port 54996 ssh2


Failed password for nattapong from 209.141.56.12 port 53708 ssh2


Failed password for nattapong from 209.141.56.12 port 46963 ssh2


Failed password for nattapong from 209.141.56.12 port 57974 ssh2


Failed password for nattapong from 209.141.56.12 port 56390 ssh2


Failed password for nattapong from 209.141.56.12 port 49391 ssh2


Accepted password for nattapong from 209.141.56.12 port 51234 ssh2


Failed password for nattapong from 209.141.56.12 port 54062 ssh2


203.211.196.61 - - "GET /api/orders?page=2 HTTP/1.1" 200 3805


21.223.248.220 - - "GET /api/products HTTP/1.1" 200 7829


Accepted password for oppa from 10.0.5.199 port 45424 ssh2


114.8.67.51 - - "GET /api/products HTTP/1.1" 200 6751


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 336


ALLOW IN=110.162.184.28 OUT= PROTO=TCP DPT=80


ALLOW IN=199.126.110.83 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.0.222 port 56406 ssh2


ALLOW IN=221.45.106.115 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.1.23 port 59975 ssh2


ALLOW IN=113.101.77.106 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=587 interval=300s


Accepted password for somchai from 10.0.2.52 port 42447 ssh2


Accepted password for admin from 10.0.0.175 port 56143 ssh2


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=696 interval=300s


OUTBOUND src=10.0.1.125 dst=45.137.21.9 bytes=985661440 proto=TCP dport=443 duration=492s


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=863 interval=300s


ALLOW IN=109.221.92.242 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=373 interval=300s


181.247.247.31 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 208


34.193.64.191 - - "GET /login HTTP/1.1" 200 3480


OUTBOUND src=10.0.5.188 dst=45.137.21.9 bytes=7146045440 proto=TCP dport=443 duration=91s


ALLOW IN=131.253.84.20 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=737 interval=300s


94.242.213.200 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 478


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=693 interval=300s


ALLOW IN=89.115.9.126 OUT= PROTO=TCP DPT=443


156.185.209.45 - - "GET /static/app.js HTTP/1.1" 200 6896


CONN src=10.0.4.82 dst=209.141.56.12 dport=443 bytes=379 interval=300s


ALLOW IN=164.226.180.232 OUT= PROTO=TCP DPT=443


ALLOW IN=113.37.114.100 OUT= PROTO=TCP DPT=443


ALLOW IN=200.130.62.50 OUT= PROTO=TCP DPT=80


ALLOW IN=163.215.193.105 OUT= PROTO=TCP DPT=80


OUTBOUND src=10.0.5.81 dst=185.220.101.34 bytes=6399459328 proto=TCP dport=443 duration=499s


106.144.198.105 - - "GET /health HTTP/1.1" 200 2971


70.49.54.128 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 200 407


ALLOW IN=70.238.71.230 OUT= PROTO=TCP DPT=80


ALLOW IN=35.71.169.28 OUT= PROTO=TCP DPT=80


Failed password for somchai from 193.27.228.114 port 40532 ssh2


Failed password for somchai from 193.27.228.114 port 50819 ssh2


Failed password for somchai from 193.27.228.114 port 47062 ssh2


Failed password for somchai from 193.27.228.114 port 58796 ssh2


Failed password for somchai from 193.27.228.114 port 40326 ssh2


Failed password for somchai from 193.27.228.114 port 40719 ssh2


Failed password for somchai from 193.27.228.114 port 46464 ssh2


Failed password for somchai from 193.27.228.114 port 53378 ssh2


Accepted password for svc_backup from 10.0.3.6 port 40275 ssh2


Accepted password for oppa from 10.0.4.175 port 54358 ssh2


ALLOW IN=75.68.63.104 OUT= PROTO=TCP DPT=80


Accepted password for guest from 10.0.4.65 port 59564 ssh2


ALLOW IN=198.20.122.132 OUT= PROTO=TCP DPT=443


ALLOW IN=91.67.187.37 OUT= PROTO=TCP DPT=80


ALLOW IN=167.203.151.69 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.2.48 dst=209.141.56.12 bytes=2030043136 proto=TCP dport=443 duration=217s


Accepted password for somchai from 10.0.4.215 port 48281 ssh2


Accepted password for guest from 10.0.0.230 port 58752 ssh2


OUTBOUND src=10.0.1.79 dst=91.219.236.18 bytes=7672430592 proto=TCP dport=443 duration=402s


Accepted password for admin from 10.0.0.166 port 52594 ssh2


ALLOW IN=33.212.37.121 OUT= PROTO=TCP DPT=443


87.233.180.108 - - "GET /login HTTP/1.1" 200 7258


70.253.142.16 - - "GET /login HTTP/1.1" 200 5107


ALLOW IN=95.190.81.179 OUT= PROTO=TCP DPT=80


94.114.139.172 - - "GET /dashboard HTTP/1.1" 200 5346


ALLOW IN=122.195.145.217 OUT= PROTO=TCP DPT=443


204.51.64.212 - - "GET /dashboard HTTP/1.1" 200 5673


Accepted password for www-data from 10.0.3.148 port 59187 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


Accepted password for somchai from 10.0.5.243 port 47925 ssh2


ALLOW IN=198.63.46.30 OUT= PROTO=TCP DPT=443


136.220.68.80 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 345


46.209.54.66 - - "GET /static/app.js HTTP/1.1" 200 1804


26.201.18.170 - - "GET /api/orders?page=2 HTTP/1.1" 200 1436


190.151.176.193 - - "GET /dashboard HTTP/1.1" 200 1880


51.167.192.219 - - "GET / HTTP/1.1" 200 1024


Accepted password for postgres from 10.0.4.97 port 59059 ssh2


OUTBOUND src=10.0.4.225 dst=185.220.101.34 bytes=5734662144 proto=TCP dport=443 duration=493s


ALLOW IN=33.104.42.58 OUT= PROTO=TCP DPT=80


Failed password for svc_backup from 185.220.101.34 port 43190 ssh2


Failed password for svc_backup from 185.220.101.34 port 50416 ssh2


Failed password for svc_backup from 185.220.101.34 port 49474 ssh2


Failed password for svc_backup from 185.220.101.34 port 41034 ssh2


Failed password for svc_backup from 185.220.101.34 port 40925 ssh2


Failed password for svc_backup from 185.220.101.34 port 42070 ssh2


Failed password for svc_backup from 185.220.101.34 port 55867 ssh2


Failed password for svc_backup from 185.220.101.34 port 53644 ssh2


Failed password for svc_backup from 185.220.101.34 port 42140 ssh2


Failed password for svc_backup from 185.220.101.34 port 44154 ssh2


Failed password for svc_backup from 185.220.101.34 port 48476 ssh2


ALLOW IN=173.115.77.139 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.2.171 port 57112 ssh2


57.207.9.225 - - "GET /api/orders?page=2 HTTP/1.1" 200 6163


202.11.170.88 - - "GET /api/products HTTP/1.1" 200 6010


Accepted password for deploy from 10.0.5.242 port 44862 ssh2


OUTBOUND src=10.0.3.34 dst=209.141.56.12 bytes=7437549568 proto=TCP dport=443 duration=97s


146.245.26.44 - - "GET /api/products HTTP/1.1" 200 4927


ALLOW IN=39.5.157.86 OUT= PROTO=TCP DPT=80


Failed password for somchai from 185.220.101.34 port 45491 ssh2


Failed password for somchai from 185.220.101.34 port 53066 ssh2


Failed password for somchai from 185.220.101.34 port 49875 ssh2


Failed password for somchai from 185.220.101.34 port 52445 ssh2


Failed password for somchai from 185.220.101.34 port 57449 ssh2


Failed password for somchai from 185.220.101.34 port 57381 ssh2


Failed password for somchai from 185.220.101.34 port 48605 ssh2


Failed password for somchai from 185.220.101.34 port 52781 ssh2


Failed password for somchai from 185.220.101.34 port 40388 ssh2


Failed password for somchai from 185.220.101.34 port 54706 ssh2


Failed password for somchai from 185.220.101.34 port 50344 ssh2


209.141.56.12 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 94


ALLOW IN=76.203.145.138 OUT= PROTO=TCP DPT=443


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=543 interval=300s


Accepted password for guest from 10.0.5.31 port 57386 ssh2


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=657 interval=300s


155.253.57.147 - - "GET / HTTP/1.1" 200 2394


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=211 interval=300s


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=471 interval=300s


OUTBOUND src=10.0.1.229 dst=45.137.21.9 bytes=1169162240 proto=TCP dport=443 duration=552s


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=414 interval=300s


214.120.88.9 - - "GET /health HTTP/1.1" 200 4707


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=455 interval=300s


Accepted password for somchai from 10.0.2.24 port 49419 ssh2


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=269 interval=300s


152.114.108.236 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 229


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=558 interval=300s


OUTBOUND src=10.0.4.220 dst=209.141.56.12 bytes=2496659456 proto=TCP dport=443 duration=148s


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=462 interval=300s


Accepted password for guest from 10.0.1.73 port 55722 ssh2


Accepted password for postgres from 10.0.5.254 port 51874 ssh2


CONN src=10.0.5.173 dst=45.137.21.9 dport=443 bytes=310 interval=300s


Accepted password for svc_backup from 10.0.4.41 port 40574 ssh2


209.141.56.12 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 85


45.137.21.9 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 39


207.178.65.131 - - "GET / HTTP/1.1" 200 3523


ALLOW IN=85.41.242.217 OUT= PROTO=TCP DPT=80


155.76.83.223 - - "GET /login HTTP/1.1" 200 1665


Accepted password for svc_backup from 10.0.4.203 port 44079 ssh2


67.151.80.203 - - "GET /health HTTP/1.1" 200 5426


OUTBOUND src=10.0.4.116 dst=45.137.21.9 bytes=5325717504 proto=TCP dport=443 duration=118s


ALLOW IN=215.222.33.31 OUT= PROTO=TCP DPT=80


161.149.80.8 - - "GET /login HTTP/1.1" 200 6081


Accepted password for www-data from 10.0.5.178 port 49057 ssh2


ALLOW IN=205.100.23.179 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.3.140 port 45502 ssh2


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=198.154.250.55 OUT= PROTO=TCP DPT=22 FLAGS=SYN


Accepted password for somchai from 10.0.5.114 port 54398 ssh2


Accepted password for oppa from 10.0.3.244 port 52707 ssh2


ALLOW IN=122.165.71.175 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.3.25 port 54571 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/su -


Accepted password for nattapong from 10.0.0.2 port 47824 ssh2


ALLOW IN=52.5.202.214 OUT= PROTO=TCP DPT=443


ALLOW IN=109.215.32.16 OUT= PROTO=TCP DPT=443


ALLOW IN=182.52.191.48 OUT= PROTO=TCP DPT=443


ALLOW IN=102.177.124.233 OUT= PROTO=TCP DPT=443


57.193.59.204 - - "GET /login HTTP/1.1" 200 1496


ALLOW IN=188.19.92.184 OUT= PROTO=TCP DPT=443


22.24.253.92 - - "GET / HTTP/1.1" 200 3676


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


ALLOW IN=13.6.213.101 OUT= PROTO=TCP DPT=80


ALLOW IN=129.245.93.208 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.1.19 port 59607 ssh2


143.226.142.47 - - "GET /static/app.js HTTP/1.1" 200 3770


Accepted password for guest from 10.0.5.144 port 59996 ssh2


Failed password for oppa from 45.137.21.9 port 56059 ssh2


Failed password for oppa from 45.137.21.9 port 59881 ssh2


Failed password for oppa from 45.137.21.9 port 56115 ssh2


Failed password for oppa from 45.137.21.9 port 53858 ssh2


Failed password for oppa from 45.137.21.9 port 41874 ssh2


Failed password for oppa from 45.137.21.9 port 45164 ssh2


Failed password for oppa from 45.137.21.9 port 41061 ssh2


Failed password for oppa from 45.137.21.9 port 53920 ssh2


Failed password for oppa from 45.137.21.9 port 43736 ssh2


Failed password for oppa from 45.137.21.9 port 59153 ssh2


Failed password for oppa from 45.137.21.9 port 48788 ssh2


Failed password for oppa from 45.137.21.9 port 46133 ssh2


Failed password for oppa from 45.137.21.9 port 45904 ssh2


Failed password for oppa from 45.137.21.9 port 57799 ssh2


Failed password for oppa from 45.137.21.9 port 43134 ssh2


Failed password for oppa from 45.137.21.9 port 45758 ssh2


Failed password for oppa from 45.137.21.9 port 53243 ssh2


Failed password for oppa from 45.137.21.9 port 58135 ssh2


Failed password for oppa from 45.137.21.9 port 40257 ssh2


Failed password for oppa from 45.137.21.9 port 46041 ssh2


Failed password for oppa from 45.137.21.9 port 53540 ssh2


Failed password for oppa from 45.137.21.9 port 58009 ssh2


Accepted password for root from 10.0.5.37 port 40371 ssh2


Failed password for oppa from 91.219.236.18 port 40614 ssh2


Failed password for oppa from 91.219.236.18 port 42551 ssh2


Failed password for oppa from 91.219.236.18 port 58866 ssh2


Failed password for oppa from 91.219.236.18 port 58789 ssh2


Failed password for oppa from 91.219.236.18 port 53686 ssh2


Failed password for oppa from 91.219.236.18 port 43774 ssh2


Failed password for oppa from 91.219.236.18 port 40683 ssh2


Failed password for oppa from 91.219.236.18 port 45631 ssh2


Failed password for oppa from 91.219.236.18 port 55076 ssh2


Failed password for somchai from 45.137.21.9 port 48666 ssh2


Failed password for somchai from 45.137.21.9 port 56310 ssh2


Failed password for somchai from 45.137.21.9 port 52263 ssh2


Failed password for somchai from 45.137.21.9 port 48472 ssh2


Failed password for somchai from 45.137.21.9 port 50652 ssh2


Failed password for somchai from 45.137.21.9 port 54070 ssh2


Failed password for somchai from 45.137.21.9 port 54411 ssh2


Failed password for somchai from 45.137.21.9 port 52511 ssh2


Failed password for somchai from 45.137.21.9 port 45823 ssh2


Failed password for somchai from 45.137.21.9 port 47168 ssh2


Failed password for somchai from 45.137.21.9 port 41507 ssh2


Failed password for somchai from 45.137.21.9 port 49825 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/su -


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


46.38.87.235 - - "GET /api/orders?page=2 HTTP/1.1" 200 4486


Accepted password for postgres from 10.0.3.243 port 45911 ssh2


Accepted password for svc_backup from 10.0.4.55 port 43342 ssh2


173.29.2.116 - - "GET /api/products HTTP/1.1" 200 1915


Accepted password for svc_backup from 10.0.5.63 port 59344 ssh2


Accepted password for svc_backup from 10.0.3.120 port 50513 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for oppa from 10.0.5.98 port 57063 ssh2


178.240.230.61 - - "GET /health HTTP/1.1" 200 7769


Accepted password for guest from 10.0.0.219 port 52552 ssh2


CONN src=10.0.0.253 dst=91.219.236.18 dport=443 bytes=522 interval=300s


Failed password for nattapong from 193.27.228.114 port 45803 ssh2


Failed password for nattapong from 193.27.228.114 port 48498 ssh2


Failed password for nattapong from 193.27.228.114 port 54404 ssh2


Failed password for nattapong from 193.27.228.114 port 43028 ssh2


Failed password for nattapong from 193.27.228.114 port 51637 ssh2


Failed password for nattapong from 193.27.228.114 port 59176 ssh2


Failed password for nattapong from 193.27.228.114 port 54216 ssh2


Failed password for nattapong from 193.27.228.114 port 57139 ssh2


Failed password for nattapong from 193.27.228.114 port 51212 ssh2


Failed password for nattapong from 193.27.228.114 port 45586 ssh2


Failed password for nattapong from 193.27.228.114 port 51914 ssh2


Failed password for nattapong from 193.27.228.114 port 45102 ssh2


Failed password for nattapong from 193.27.228.114 port 49459 ssh2


Failed password for nattapong from 193.27.228.114 port 58635 ssh2


Accepted password for nattapong from 193.27.228.114 port 51234 ssh2


Failed password for nattapong from 193.27.228.114 port 56507 ssh2


Failed password for nattapong from 193.27.228.114 port 48812 ssh2


Failed password for guest from 91.160.50.102 port 51965 ssh2


Failed password for guest from 91.160.50.102 port 47744 ssh2


Failed password for guest from 91.160.50.102 port 58011 ssh2


Failed password for guest from 91.160.50.102 port 53166 ssh2


Failed password for guest from 91.160.50.102 port 52059 ssh2


Failed password for guest from 91.160.50.102 port 53900 ssh2


Failed password for guest from 91.160.50.102 port 46486 ssh2


Failed password for guest from 91.160.50.102 port 55951 ssh2


Failed password for guest from 91.160.50.102 port 48191 ssh2


Accepted password for guest from 91.160.50.102 port 51234 ssh2


Failed password for guest from 91.160.50.102 port 51666 ssh2


Failed password for guest from 91.160.50.102 port 57274 ssh2


Failed password for guest from 91.160.50.102 port 53353 ssh2


CONN src=10.0.0.253 dst=91.219.236.18 dport=443 bytes=390 interval=300s


ALLOW IN=136.55.73.139 OUT= PROTO=TCP DPT=443


CONN src=10.0.0.253 dst=91.219.236.18 dport=443 bytes=637 interval=300s


177.154.53.39 - - "GET /health HTTP/1.1" 200 6630


CONN src=10.0.0.253 dst=91.219.236.18 dport=443 bytes=282 interval=300s


162.103.232.24 - - "GET /api/products HTTP/1.1" 200 2854


ALLOW IN=202.212.54.197 OUT= PROTO=TCP DPT=443


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


CONN src=10.0.0.253 dst=91.219.236.18 dport=443 bytes=244 interval=300s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Accepted password for root from 10.0.5.239 port 56219 ssh2


167.115.29.56 - - "GET /login HTTP/1.1" 200 7123


Accepted password for svc_backup from 10.0.0.88 port 44921 ssh2


ALLOW IN=22.142.219.208 OUT= PROTO=TCP DPT=80


168.219.48.246 - - "GET / HTTP/1.1" 200 6768


Accepted password for nattapong from 10.0.3.22 port 55008 ssh2


ALLOW IN=192.132.66.179 OUT= PROTO=TCP DPT=443


ALLOW IN=86.164.52.21 OUT= PROTO=TCP DPT=443


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 471


Failed password for svc_backup from 45.137.21.9 port 43196 ssh2


Failed password for svc_backup from 45.137.21.9 port 57443 ssh2


Failed password for svc_backup from 45.137.21.9 port 47006 ssh2


Failed password for svc_backup from 45.137.21.9 port 56751 ssh2


Failed password for svc_backup from 45.137.21.9 port 51226 ssh2


Failed password for svc_backup from 45.137.21.9 port 51079 ssh2


Failed password for svc_backup from 45.137.21.9 port 41898 ssh2


Failed password for svc_backup from 45.137.21.9 port 54750 ssh2


Failed password for svc_backup from 45.137.21.9 port 58108 ssh2


Failed password for svc_backup from 45.137.21.9 port 59435 ssh2


Accepted password for svc_backup from 45.137.21.9 port 51234 ssh2


Failed password for svc_backup from 45.137.21.9 port 57690 ssh2


125.219.232.151 - - "GET /static/app.js HTTP/1.1" 200 4498


ALLOW IN=125.251.178.164 OUT= PROTO=TCP DPT=443


ALLOW IN=83.139.2.105 OUT= PROTO=TCP DPT=80


ALLOW IN=215.27.236.166 OUT= PROTO=TCP DPT=80


ALLOW IN=119.76.154.160 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.4.156 port 41292 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


107.114.10.243 - - "GET / HTTP/1.1" 200 7762


OUTBOUND src=10.0.0.109 dst=185.220.101.34 bytes=7250903040 proto=TCP dport=443 duration=427s


ALLOW IN=194.208.34.56 OUT= PROTO=TCP DPT=80


ALLOW IN=218.137.55.254 OUT= PROTO=TCP DPT=443


39.81.210.7 - - "GET /health HTTP/1.1" 200 1254


OUTBOUND src=10.0.5.104 dst=193.27.228.114 bytes=1339031552 proto=TCP dport=443 duration=283s


Failed password for root from 105.142.168.244 port 42442 ssh2


Failed password for root from 105.142.168.244 port 40640 ssh2


Failed password for root from 105.142.168.244 port 41509 ssh2


Failed password for root from 105.142.168.244 port 54183 ssh2


Failed password for root from 105.142.168.244 port 42419 ssh2


Failed password for root from 105.142.168.244 port 52877 ssh2


Failed password for root from 105.142.168.244 port 42958 ssh2


Failed password for root from 105.142.168.244 port 48803 ssh2


Failed password for root from 105.142.168.244 port 52777 ssh2


Failed password for root from 105.142.168.244 port 49800 ssh2


Failed password for root from 105.142.168.244 port 57130 ssh2


Failed password for root from 105.142.168.244 port 54086 ssh2


Failed password for root from 105.142.168.244 port 40051 ssh2


Failed password for root from 105.142.168.244 port 57748 ssh2


Failed password for root from 105.142.168.244 port 43295 ssh2


Failed password for root from 105.142.168.244 port 59381 ssh2


Failed password for root from 105.142.168.244 port 47366 ssh2


Failed password for root from 105.142.168.244 port 55382 ssh2


Failed password for root from 105.142.168.244 port 58405 ssh2


Failed password for root from 105.142.168.244 port 40492 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


172.3.33.223 - - "GET /dashboard HTTP/1.1" 200 773


ALLOW IN=159.174.220.26 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.5.10 port 50385 ssh2


171.192.135.140 - - "GET /dashboard HTTP/1.1" 200 5250


ALLOW IN=116.59.20.60 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.2.82 port 49153 ssh2


18.206.240.86 - - "GET /dashboard HTTP/1.1" 200 6394


ALLOW IN=135.24.202.107 OUT= PROTO=TCP DPT=80


101.4.51.111 - - "GET /dashboard HTTP/1.1" 200 1818


Accepted password for svc_backup from 10.0.2.147 port 46329 ssh2


Accepted password for postgres from 10.0.2.69 port 58243 ssh2


123.40.56.226 - - "GET /api/orders?page=2 HTTP/1.1" 200 4832


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=279 interval=60s


ALLOW IN=61.228.191.143 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=828 interval=60s


Failed password for somchai from 193.27.228.114 port 55528 ssh2


Failed password for somchai from 193.27.228.114 port 43377 ssh2


Failed password for somchai from 193.27.228.114 port 59372 ssh2


Failed password for somchai from 193.27.228.114 port 56460 ssh2


Failed password for somchai from 193.27.228.114 port 43947 ssh2


Failed password for somchai from 193.27.228.114 port 53149 ssh2


Failed password for somchai from 193.27.228.114 port 48973 ssh2


Failed password for somchai from 193.27.228.114 port 45937 ssh2


Failed password for somchai from 193.27.228.114 port 44790 ssh2


Failed password for somchai from 193.27.228.114 port 41669 ssh2


Failed password for somchai from 193.27.228.114 port 44873 ssh2


Failed password for somchai from 193.27.228.114 port 51015 ssh2


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=265 interval=60s


Failed password for somchai from 193.27.228.114 port 56707 ssh2


Failed password for somchai from 193.27.228.114 port 40578 ssh2


Failed password for somchai from 193.27.228.114 port 53346 ssh2


Failed password for somchai from 193.27.228.114 port 46541 ssh2


Failed password for somchai from 193.27.228.114 port 55702 ssh2


Failed password for somchai from 193.27.228.114 port 41692 ssh2


Failed password for somchai from 193.27.228.114 port 43606 ssh2


Failed password for somchai from 193.27.228.114 port 50041 ssh2


Accepted password for somchai from 193.27.228.114 port 51234 ssh2


Failed password for somchai from 193.27.228.114 port 47583 ssh2


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=842 interval=60s


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=879 interval=60s


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=672 interval=60s


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=706 interval=60s


CONN src=10.0.4.117 dst=45.137.21.9 dport=443 bytes=825 interval=60s


ALLOW IN=166.231.41.119 OUT= PROTO=TCP DPT=80


Accepted password for oppa from 10.0.5.146 port 56407 ssh2


Accepted password for svc_backup from 10.0.0.164 port 51803 ssh2


Accepted password for nattapong from 10.0.1.247 port 44397 ssh2


162.191.230.165 - - "GET /api/products HTTP/1.1" 200 3621


ALLOW IN=165.61.151.188 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Accepted password for deploy from 10.0.0.30 port 49131 ssh2


ALLOW IN=212.71.151.49 OUT= PROTO=TCP DPT=443


ALLOW IN=168.58.213.118 OUT= PROTO=TCP DPT=80


ALLOW IN=206.57.16.208 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.0.65 port 53339 ssh2


159.174.66.245 - - "GET /static/app.js HTTP/1.1" 200 2928


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


102.34.178.109 - - "GET /api/products HTTP/1.1" 200 3802


ALLOW IN=184.121.111.241 OUT= PROTO=TCP DPT=443


200.190.38.72 - - "GET /dashboard HTTP/1.1" 200 5554


ALLOW IN=60.186.237.141 OUT= PROTO=TCP DPT=443


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/su -


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


ALLOW IN=196.31.134.174 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.0.160 port 51858 ssh2


Accepted password for somchai from 10.0.2.120 port 55905 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Accepted password for somchai from 10.0.1.3 port 45497 ssh2


Accepted password for admin from 10.0.4.31 port 54625 ssh2


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=819 interval=300s


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=367 interval=300s


Accepted password for deploy from 10.0.2.187 port 47841 ssh2


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=629 interval=300s


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=357 interval=300s


125.90.38.48 - - "GET /login HTTP/1.1" 200 6221


190.27.1.148 - - "GET /health HTTP/1.1" 200 4625


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=523 interval=300s


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=644 interval=300s


ALLOW IN=102.138.103.86 OUT= PROTO=TCP DPT=80


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=588 interval=300s


OUTBOUND src=10.0.4.51 dst=91.219.236.18 bytes=4110417920 proto=TCP dport=443 duration=215s


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=226 interval=300s


CONN src=10.0.4.170 dst=185.220.101.34 dport=443 bytes=818 interval=300s


Failed password for guest from 91.219.236.18 port 40357 ssh2


Failed password for guest from 91.219.236.18 port 48552 ssh2


Failed password for guest from 91.219.236.18 port 44720 ssh2


Failed password for guest from 91.219.236.18 port 53809 ssh2


Failed password for guest from 91.219.236.18 port 52079 ssh2


Failed password for guest from 91.219.236.18 port 40828 ssh2


Failed password for guest from 91.219.236.18 port 44837 ssh2


Failed password for guest from 91.219.236.18 port 52518 ssh2


Failed password for guest from 91.219.236.18 port 59217 ssh2


Failed password for guest from 91.219.236.18 port 50577 ssh2


Failed password for guest from 91.219.236.18 port 44060 ssh2


Failed password for guest from 91.219.236.18 port 50699 ssh2


Failed password for guest from 91.219.236.18 port 43530 ssh2


Failed password for guest from 91.219.236.18 port 54940 ssh2


Failed password for guest from 91.219.236.18 port 45143 ssh2


Failed password for guest from 91.219.236.18 port 46480 ssh2


Failed password for guest from 91.219.236.18 port 54553 ssh2


Failed password for guest from 91.219.236.18 port 49331 ssh2


Failed password for guest from 91.219.236.18 port 59875 ssh2


Failed password for guest from 91.219.236.18 port 44644 ssh2


Failed password for guest from 91.219.236.18 port 55633 ssh2


ALLOW IN=145.113.142.51 OUT= PROTO=TCP DPT=80


38.69.155.2 - - "GET /dashboard HTTP/1.1" 200 2921


137.236.3.74 - - "GET /api/products HTTP/1.1" 200 4236


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=433 interval=60s


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=572 interval=60s


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=843 interval=60s


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=647 interval=60s


69.194.125.128 - - "GET /static/app.js HTTP/1.1" 200 5562


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=573 interval=60s


ALLOW IN=13.64.6.33 OUT= PROTO=TCP DPT=80


193.27.228.114 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 48


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=774 interval=60s


Accepted password for root from 10.0.3.24 port 48637 ssh2


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=357 interval=60s


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=599 interval=60s


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=225 interval=60s


CONN src=10.0.5.15 dst=45.137.21.9 dport=443 bytes=725 interval=60s


56.237.240.169 - - "GET /dashboard HTTP/1.1" 200 4487


ALLOW IN=42.107.143.94 OUT= PROTO=TCP DPT=443


Failed password for deploy from 162.219.199.2 port 49120 ssh2


Failed password for deploy from 162.219.199.2 port 42050 ssh2


Failed password for deploy from 162.219.199.2 port 54993 ssh2


Failed password for deploy from 162.219.199.2 port 43334 ssh2


Failed password for deploy from 162.219.199.2 port 48596 ssh2


Failed password for deploy from 162.219.199.2 port 50681 ssh2


Failed password for deploy from 162.219.199.2 port 46126 ssh2


Failed password for deploy from 162.219.199.2 port 56039 ssh2


Failed password for deploy from 162.219.199.2 port 50269 ssh2


Failed password for deploy from 162.219.199.2 port 51533 ssh2


Failed password for deploy from 162.219.199.2 port 45653 ssh2


Failed password for deploy from 162.219.199.2 port 52734 ssh2


Failed password for deploy from 162.219.199.2 port 52862 ssh2


Failed password for deploy from 162.219.199.2 port 43743 ssh2


69.142.137.131 - - "GET /dashboard HTTP/1.1" 200 2415


Accepted password for www-data from 10.0.1.157 port 48158 ssh2


Accepted password for deploy from 10.0.0.44 port 43958 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


Accepted password for somchai from 10.0.2.12 port 44380 ssh2


Failed password for nattapong from 193.27.228.114 port 53716 ssh2


Failed password for nattapong from 193.27.228.114 port 45074 ssh2


Failed password for nattapong from 193.27.228.114 port 56231 ssh2


Failed password for nattapong from 193.27.228.114 port 50975 ssh2


Failed password for nattapong from 193.27.228.114 port 44399 ssh2


Failed password for nattapong from 193.27.228.114 port 59980 ssh2


Failed password for nattapong from 193.27.228.114 port 49715 ssh2


Failed password for nattapong from 193.27.228.114 port 42104 ssh2


Failed password for nattapong from 193.27.228.114 port 57958 ssh2


Failed password for nattapong from 193.27.228.114 port 45372 ssh2


Failed password for nattapong from 193.27.228.114 port 56942 ssh2


Failed password for nattapong from 193.27.228.114 port 55416 ssh2


ALLOW IN=140.209.88.163 OUT= PROTO=TCP DPT=80


81.98.29.157 - - "GET /health HTTP/1.1" 200 1808


Accepted password for root from 10.0.3.50 port 40121 ssh2


Accepted password for guest from 10.0.0.16 port 47187 ssh2


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 11


93.146.30.233 - - "GET /health HTTP/1.1" 200 932


ALLOW IN=215.127.9.254 OUT= PROTO=TCP DPT=443


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Accepted password for postgres from 10.0.3.27 port 53630 ssh2


44.150.33.229 - - "GET / HTTP/1.1" 200 1895


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=513 interval=60s


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=678 interval=60s


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=788 interval=60s


ALLOW IN=36.199.178.71 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=813 interval=60s


ALLOW IN=146.97.43.40 OUT= PROTO=TCP DPT=80


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=749 interval=60s


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=477 interval=60s


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=600 interval=60s


61.168.128.78 - - "GET /api/orders?page=2 HTTP/1.1" 200 6881


CONN src=10.0.4.166 dst=185.220.101.34 dport=443 bytes=225 interval=60s


ALLOW IN=101.78.96.198 OUT= PROTO=TCP DPT=80


ALLOW IN=114.80.225.237 OUT= PROTO=TCP DPT=443


91.90.203.248 - - "GET /api/products HTTP/1.1" 200 2587


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


209.141.56.12 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 444


Accepted password for svc_backup from 10.0.1.53 port 42994 ssh2


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=419 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=494 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=471 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=248 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=504 interval=30s


117.3.125.214 - - "GET /health HTTP/1.1" 200 4080


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=787 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=611 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=431 interval=30s


CONN src=10.0.5.218 dst=91.219.236.18 dport=443 bytes=839 interval=30s


Failed password for nattapong from 91.219.236.18 port 45522 ssh2


Failed password for nattapong from 91.219.236.18 port 40521 ssh2


Failed password for nattapong from 91.219.236.18 port 46219 ssh2


Failed password for nattapong from 91.219.236.18 port 43059 ssh2


Failed password for nattapong from 91.219.236.18 port 50175 ssh2


Failed password for nattapong from 91.219.236.18 port 59594 ssh2


Failed password for nattapong from 91.219.236.18 port 58347 ssh2


Failed password for nattapong from 91.219.236.18 port 58365 ssh2


Failed password for nattapong from 91.219.236.18 port 42488 ssh2


Failed password for nattapong from 91.219.236.18 port 45829 ssh2


Failed password for nattapong from 91.219.236.18 port 50611 ssh2


Failed password for nattapong from 91.219.236.18 port 44776 ssh2


Failed password for nattapong from 91.219.236.18 port 44359 ssh2


Failed password for nattapong from 91.219.236.18 port 53259 ssh2