Failed password for deploy from 114.212.202.249 port 58533 ssh2


Failed password for deploy from 114.212.202.249 port 48364 ssh2


Failed password for deploy from 114.212.202.249 port 55654 ssh2


Failed password for deploy from 114.212.202.249 port 51842 ssh2


Failed password for deploy from 114.212.202.249 port 51422 ssh2


Failed password for deploy from 114.212.202.249 port 56011 ssh2


Failed password for deploy from 114.212.202.249 port 48086 ssh2


Failed password for deploy from 114.212.202.249 port 52064 ssh2


Failed password for deploy from 114.212.202.249 port 41890 ssh2


Failed password for deploy from 114.212.202.249 port 52626 ssh2


Failed password for deploy from 114.212.202.249 port 59838 ssh2


Failed password for deploy from 114.212.202.249 port 44828 ssh2


Accepted password for deploy from 114.212.202.249 port 51234 ssh2


Failed password for deploy from 114.212.202.249 port 40925 ssh2


Failed password for deploy from 114.212.202.249 port 44845 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


ALLOW IN=220.162.171.44 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.2.70 port 48667 ssh2


86.15.82.95 - - "GET / HTTP/1.1" 200 2582


32.80.248.38 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 403 477


ALLOW IN=201.130.184.247 OUT= PROTO=TCP DPT=443


Failed password for root from 91.219.236.18 port 56632 ssh2


Failed password for root from 91.219.236.18 port 58932 ssh2


Failed password for root from 91.219.236.18 port 56247 ssh2


Failed password for root from 91.219.236.18 port 59225 ssh2


Failed password for root from 91.219.236.18 port 43828 ssh2


Failed password for root from 91.219.236.18 port 47447 ssh2


Failed password for root from 91.219.236.18 port 52793 ssh2


Failed password for root from 91.219.236.18 port 48074 ssh2


Failed password for root from 91.219.236.18 port 58751 ssh2


Failed password for root from 91.219.236.18 port 55701 ssh2


Accepted password for oppa from 10.0.2.190 port 52796 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


Accepted password for svc_backup from 10.0.1.213 port 46901 ssh2


Failed password for postgres from 91.219.236.18 port 56919 ssh2


Failed password for postgres from 91.219.236.18 port 43232 ssh2


Failed password for postgres from 91.219.236.18 port 46306 ssh2


Failed password for postgres from 91.219.236.18 port 59344 ssh2


Failed password for postgres from 91.219.236.18 port 42832 ssh2


Failed password for postgres from 91.219.236.18 port 53200 ssh2


Failed password for postgres from 91.219.236.18 port 40081 ssh2


Failed password for postgres from 91.219.236.18 port 43023 ssh2


Failed password for postgres from 91.219.236.18 port 57723 ssh2


Failed password for postgres from 91.219.236.18 port 44375 ssh2


Failed password for postgres from 91.219.236.18 port 55524 ssh2


Failed password for postgres from 91.219.236.18 port 54755 ssh2


Failed password for postgres from 91.219.236.18 port 44806 ssh2


Failed password for postgres from 91.219.236.18 port 42959 ssh2


Failed password for postgres from 91.219.236.18 port 51855 ssh2


Failed password for postgres from 91.219.236.18 port 58452 ssh2


Failed password for postgres from 91.219.236.18 port 53576 ssh2


Failed password for postgres from 91.219.236.18 port 44901 ssh2


Failed password for postgres from 91.219.236.18 port 45005 ssh2


Failed password for postgres from 91.219.236.18 port 44732 ssh2


Failed password for postgres from 91.219.236.18 port 57981 ssh2


Failed password for postgres from 91.219.236.18 port 40766 ssh2


Failed password for postgres from 91.219.236.18 port 56468 ssh2


Accepted password for www-data from 10.0.2.144 port 48658 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


ALLOW IN=186.178.36.157 OUT= PROTO=TCP DPT=443


116.222.39.1 - - "GET /login HTTP/1.1" 200 2767


CONN src=10.0.1.220 dst=193.27.228.114 dport=443 bytes=323 interval=300s


Failed password for nattapong from 185.220.101.34 port 42442 ssh2


Failed password for nattapong from 185.220.101.34 port 56906 ssh2


Failed password for nattapong from 185.220.101.34 port 41090 ssh2


Failed password for nattapong from 185.220.101.34 port 52687 ssh2


Failed password for nattapong from 185.220.101.34 port 46595 ssh2


Failed password for nattapong from 185.220.101.34 port 53153 ssh2


Failed password for nattapong from 185.220.101.34 port 55276 ssh2


Failed password for nattapong from 185.220.101.34 port 53035 ssh2


Failed password for nattapong from 185.220.101.34 port 44037 ssh2


Failed password for nattapong from 185.220.101.34 port 56885 ssh2


Failed password for nattapong from 185.220.101.34 port 50014 ssh2


Failed password for nattapong from 185.220.101.34 port 58914 ssh2


Failed password for nattapong from 185.220.101.34 port 42100 ssh2


Failed password for nattapong from 185.220.101.34 port 57160 ssh2


45.137.21.9 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 66


CONN src=10.0.1.220 dst=193.27.228.114 dport=443 bytes=385 interval=300s


CONN src=10.0.5.246 dst=209.141.56.12 dport=443 bytes=466 interval=60s


CONN src=10.0.5.246 dst=209.141.56.12 dport=443 bytes=241 interval=60s


CONN src=10.0.5.246 dst=209.141.56.12 dport=443 bytes=724 interval=60s


CONN src=10.0.1.220 dst=193.27.228.114 dport=443 bytes=860 interval=300s


CONN src=10.0.5.246 dst=209.141.56.12 dport=443 bytes=655 interval=60s


CONN src=10.0.5.246 dst=209.141.56.12 dport=443 bytes=305 interval=60s


CONN src=10.0.5.246 dst=209.141.56.12 dport=443 bytes=205 interval=60s


ALLOW IN=207.96.126.184 OUT= PROTO=TCP DPT=80


ALLOW IN=25.182.169.207 OUT= PROTO=TCP DPT=80


CONN src=10.0.1.220 dst=193.27.228.114 dport=443 bytes=751 interval=300s


58.32.56.184 - - "GET /api/products HTTP/1.1" 200 2598


Accepted password for somchai from 10.0.1.3 port 56574 ssh2


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=406 interval=60s


CONN src=10.0.1.220 dst=193.27.228.114 dport=443 bytes=330 interval=300s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=850 interval=60s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=349 interval=60s


OUTBOUND src=10.0.0.218 dst=209.141.56.12 bytes=5295308800 proto=TCP dport=443 duration=444s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=411 interval=60s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=598 interval=60s


18.253.166.47 - - "GET /dashboard HTTP/1.1" 200 1937


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=561 interval=60s


CONN src=10.0.1.220 dst=193.27.228.114 dport=443 bytes=323 interval=300s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=392 interval=60s


77.89.203.129 - - "GET /login HTTP/1.1" 200 3311


Accepted password for www-data from 10.0.5.229 port 40902 ssh2


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 176


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=881 interval=60s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=878 interval=60s


CONN src=10.0.5.72 dst=209.141.56.12 dport=443 bytes=448 interval=60s


Failed password for deploy from 45.137.21.9 port 42207 ssh2


Failed password for deploy from 45.137.21.9 port 41146 ssh2


Failed password for deploy from 45.137.21.9 port 55367 ssh2


Failed password for deploy from 45.137.21.9 port 43477 ssh2


Failed password for deploy from 45.137.21.9 port 40016 ssh2


Failed password for deploy from 45.137.21.9 port 45787 ssh2


Failed password for deploy from 45.137.21.9 port 52197 ssh2


Failed password for deploy from 45.137.21.9 port 58195 ssh2


Failed password for deploy from 45.137.21.9 port 51865 ssh2


Accepted password for deploy from 45.137.21.9 port 51234 ssh2


Accepted password for www-data from 10.0.4.15 port 49999 ssh2


Accepted password for root from 10.0.4.136 port 48822 ssh2


Accepted password for root from 10.0.0.132 port 59558 ssh2


Accepted password for deploy from 10.0.5.44 port 40133 ssh2


192.22.65.139 - - "GET /static/app.js HTTP/1.1" 200 4256


Accepted password for admin from 10.0.2.59 port 50135 ssh2


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 164


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 45


Accepted password for guest from 10.0.2.54 port 56106 ssh2


209.141.56.12 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 163


ALLOW IN=100.213.5.216 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.2.167 port 53900 ssh2


ALLOW IN=21.241.38.168 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.1.242 port 57703 ssh2


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=352 interval=60s


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=507 interval=60s


Failed password for www-data from 209.141.56.12 port 59311 ssh2


Failed password for www-data from 209.141.56.12 port 59848 ssh2


Failed password for www-data from 209.141.56.12 port 57591 ssh2


Failed password for www-data from 209.141.56.12 port 50163 ssh2


Failed password for www-data from 209.141.56.12 port 50758 ssh2


Failed password for www-data from 209.141.56.12 port 41456 ssh2


Failed password for www-data from 209.141.56.12 port 42596 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Failed password for www-data from 209.141.56.12 port 45122 ssh2


Failed password for www-data from 209.141.56.12 port 54713 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


Failed password for www-data from 209.141.56.12 port 45491 ssh2


Failed password for www-data from 209.141.56.12 port 57452 ssh2


Failed password for www-data from 209.141.56.12 port 45221 ssh2


Failed password for www-data from 209.141.56.12 port 47216 ssh2


Failed password for www-data from 209.141.56.12 port 45490 ssh2


Failed password for www-data from 209.141.56.12 port 57707 ssh2


Failed password for www-data from 209.141.56.12 port 55082 ssh2


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=585 interval=60s


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=388 interval=60s


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=750 interval=60s


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=684 interval=60s


58.228.22.68 - - "GET /dashboard HTTP/1.1" 200 4009


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=446 interval=60s


CONN src=10.0.2.180 dst=209.141.56.12 dport=443 bytes=430 interval=60s


152.24.130.112 - - "GET /api/orders?page=2 HTTP/1.1" 200 5886


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


90.96.15.245 - - "GET /static/app.js HTTP/1.1" 200 5705


Accepted password for oppa from 10.0.3.61 port 48703 ssh2


ALLOW IN=101.233.132.102 OUT= PROTO=TCP DPT=443


76.166.54.40 - - "GET /login HTTP/1.1" 200 7505


ALLOW IN=120.88.181.55 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=220 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=320 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=227 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=820 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=425 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=646 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=203 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=801 interval=60s


CONN src=10.0.0.145 dst=45.137.21.9 dport=443 bytes=864 interval=60s


111.112.21.12 - - "GET /api/products HTTP/1.1" 200 299


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash


ALLOW IN=57.217.77.73 OUT= PROTO=TCP DPT=443


ALLOW IN=59.153.199.230 OUT= PROTO=TCP DPT=80


Accepted password for guest from 10.0.2.6 port 44251 ssh2


ALLOW IN=49.223.254.184 OUT= PROTO=TCP DPT=80


ALLOW IN=114.178.109.185 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.4.15 port 40381 ssh2


206.180.205.4 - - "GET / HTTP/1.1" 200 5706


Accepted password for somchai from 10.0.1.111 port 54775 ssh2


Accepted password for svc_backup from 10.0.3.253 port 58325 ssh2


182.167.52.234 - - "GET /dashboard HTTP/1.1" 200 2757


ALLOW IN=44.51.53.145 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.5.67 port 40960 ssh2


185.220.101.34 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 101


75.76.170.21 - - "GET /static/app.js HTTP/1.1" 200 5636


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


Accepted password for somchai from 10.0.3.21 port 42927 ssh2


Accepted password for postgres from 10.0.5.163 port 42719 ssh2


75.8.182.202 - - "GET / HTTP/1.1" 200 3024


ALLOW IN=77.186.134.111 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.2.59 port 44971 ssh2


ALLOW IN=217.90.192.12 OUT= PROTO=TCP DPT=443


206.66.108.217 - - "GET / HTTP/1.1" 200 2324


Failed password for svc_backup from 193.27.228.114 port 54481 ssh2


Failed password for svc_backup from 193.27.228.114 port 57884 ssh2


Failed password for svc_backup from 193.27.228.114 port 56732 ssh2


Failed password for svc_backup from 193.27.228.114 port 45231 ssh2


Failed password for svc_backup from 193.27.228.114 port 49615 ssh2


Failed password for svc_backup from 193.27.228.114 port 55305 ssh2


Failed password for svc_backup from 193.27.228.114 port 53526 ssh2


Failed password for svc_backup from 193.27.228.114 port 56720 ssh2


Failed password for svc_backup from 193.27.228.114 port 47710 ssh2


Failed password for svc_backup from 193.27.228.114 port 40492 ssh2


Failed password for svc_backup from 193.27.228.114 port 41969 ssh2


Failed password for svc_backup from 193.27.228.114 port 46805 ssh2


Failed password for svc_backup from 193.27.228.114 port 56403 ssh2


Failed password for svc_backup from 193.27.228.114 port 44770 ssh2


Failed password for svc_backup from 193.27.228.114 port 48908 ssh2


Failed password for svc_backup from 193.27.228.114 port 55839 ssh2


Accepted password for guest from 10.0.4.129 port 46378 ssh2


ALLOW IN=41.114.18.145 OUT= PROTO=TCP DPT=80


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


ALLOW IN=178.24.129.150 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.4.236 port 56312 ssh2


Failed password for nattapong from 185.220.101.34 port 55071 ssh2


Failed password for nattapong from 185.220.101.34 port 57743 ssh2


Failed password for nattapong from 185.220.101.34 port 53180 ssh2


Failed password for nattapong from 185.220.101.34 port 51565 ssh2


Failed password for nattapong from 185.220.101.34 port 53297 ssh2


Failed password for nattapong from 185.220.101.34 port 53688 ssh2


Failed password for nattapong from 185.220.101.34 port 57364 ssh2


Failed password for nattapong from 185.220.101.34 port 54821 ssh2


Failed password for nattapong from 185.220.101.34 port 52728 ssh2


Failed password for nattapong from 185.220.101.34 port 51913 ssh2


Failed password for nattapong from 185.220.101.34 port 50682 ssh2


Accepted password for nattapong from 185.220.101.34 port 51234 ssh2


Failed password for nattapong from 185.220.101.34 port 53070 ssh2


83.78.61.77 - - "GET /dashboard HTTP/1.1" 200 6762


118.32.62.170 - - "GET /static/app.js HTTP/1.1" 200 1691


Failed password for oppa from 197.62.176.191 port 49287 ssh2


Failed password for oppa from 197.62.176.191 port 42697 ssh2


Failed password for oppa from 197.62.176.191 port 53916 ssh2


Failed password for oppa from 197.62.176.191 port 54481 ssh2


Failed password for oppa from 197.62.176.191 port 55959 ssh2


Failed password for oppa from 197.62.176.191 port 59980 ssh2


Failed password for oppa from 197.62.176.191 port 51032 ssh2


Failed password for oppa from 197.62.176.191 port 45294 ssh2


Failed password for oppa from 197.62.176.191 port 42520 ssh2


Failed password for oppa from 197.62.176.191 port 47468 ssh2


Failed password for oppa from 197.62.176.191 port 58498 ssh2


Failed password for oppa from 197.62.176.191 port 43081 ssh2


Failed password for oppa from 197.62.176.191 port 48960 ssh2


Failed password for oppa from 197.62.176.191 port 41919 ssh2


Failed password for oppa from 197.62.176.191 port 42352 ssh2


Failed password for oppa from 197.62.176.191 port 49393 ssh2


Failed password for oppa from 197.62.176.191 port 58430 ssh2


Accepted password for oppa from 197.62.176.191 port 51234 ssh2


Failed password for oppa from 197.62.176.191 port 55712 ssh2


Failed password for oppa from 197.62.176.191 port 59359 ssh2


182.207.84.216 - - "GET /dashboard HTTP/1.1" 200 7732


Failed password for somchai from 44.105.158.111 port 59782 ssh2


Failed password for somchai from 44.105.158.111 port 50168 ssh2


Failed password for somchai from 44.105.158.111 port 44675 ssh2


Failed password for somchai from 44.105.158.111 port 46651 ssh2


Failed password for somchai from 44.105.158.111 port 46609 ssh2


Failed password for somchai from 44.105.158.111 port 57231 ssh2


Failed password for somchai from 44.105.158.111 port 55039 ssh2


Failed password for somchai from 44.105.158.111 port 42096 ssh2


Failed password for somchai from 44.105.158.111 port 42985 ssh2


Accepted password for deploy from 10.0.2.113 port 58625 ssh2


Failed password for somchai from 44.105.158.111 port 59819 ssh2


Failed password for somchai from 44.105.158.111 port 54158 ssh2


Failed password for somchai from 44.105.158.111 port 58652 ssh2


Failed password for somchai from 44.105.158.111 port 55079 ssh2


Failed password for somchai from 44.105.158.111 port 52895 ssh2


Failed password for somchai from 44.105.158.111 port 58878 ssh2


Failed password for somchai from 44.105.158.111 port 54952 ssh2


Failed password for somchai from 44.105.158.111 port 49746 ssh2


Failed password for somchai from 44.105.158.111 port 45738 ssh2


Failed password for somchai from 44.105.158.111 port 48163 ssh2


Failed password for somchai from 44.105.158.111 port 52604 ssh2


Accepted password for somchai from 44.105.158.111 port 51234 ssh2


Failed password for somchai from 44.105.158.111 port 46011 ssh2


Failed password for somchai from 44.105.158.111 port 58632 ssh2


Accepted password for guest from 10.0.4.252 port 51686 ssh2


Failed password for somchai from 44.105.158.111 port 41430 ssh2


37.206.108.43 - - "GET /login HTTP/1.1" 200 5287


Failed password for postgres from 193.27.228.114 port 56062 ssh2


Failed password for postgres from 193.27.228.114 port 54575 ssh2


Failed password for postgres from 193.27.228.114 port 49669 ssh2


Failed password for postgres from 193.27.228.114 port 49050 ssh2


Failed password for postgres from 193.27.228.114 port 51158 ssh2


Failed password for postgres from 193.27.228.114 port 52550 ssh2


Failed password for postgres from 193.27.228.114 port 58700 ssh2


Failed password for postgres from 193.27.228.114 port 55475 ssh2


Failed password for postgres from 193.27.228.114 port 54466 ssh2


Failed password for postgres from 193.27.228.114 port 52818 ssh2


Failed password for postgres from 193.27.228.114 port 51052 ssh2


Failed password for postgres from 193.27.228.114 port 42443 ssh2


Failed password for postgres from 193.27.228.114 port 41662 ssh2


Failed password for postgres from 193.27.228.114 port 41624 ssh2


Failed password for postgres from 193.27.228.114 port 41659 ssh2


Failed password for postgres from 193.27.228.114 port 42522 ssh2


Accepted password for postgres from 193.27.228.114 port 51234 ssh2


Failed password for postgres from 193.27.228.114 port 51713 ssh2


Accepted password for svc_backup from 10.0.2.195 port 49522 ssh2


ALLOW IN=67.22.115.227 OUT= PROTO=TCP DPT=80


148.112.249.57 - - "GET /api/products HTTP/1.1" 200 3770


Failed password for www-data from 45.137.21.9 port 44090 ssh2


Failed password for www-data from 45.137.21.9 port 49161 ssh2


Failed password for www-data from 45.137.21.9 port 45764 ssh2


Failed password for www-data from 45.137.21.9 port 48792 ssh2


Failed password for www-data from 45.137.21.9 port 51227 ssh2


Failed password for www-data from 45.137.21.9 port 45981 ssh2


Failed password for www-data from 45.137.21.9 port 59450 ssh2


Failed password for www-data from 45.137.21.9 port 52883 ssh2


166.139.105.48 - - "GET / HTTP/1.1" 200 1510


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 449


OUTBOUND src=10.0.1.181 dst=185.220.101.34 bytes=3356491776 proto=TCP dport=443 duration=460s


ALLOW IN=162.100.222.198 OUT= PROTO=TCP DPT=80


ALLOW IN=60.127.179.19 OUT= PROTO=TCP DPT=80


ALLOW IN=23.44.155.171 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.5.102 port 41690 ssh2


137.193.180.197 - - "GET /api/products HTTP/1.1" 200 2825


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Accepted password for postgres from 10.0.4.163 port 54609 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/passwd root


87.58.218.3 - - "GET /login HTTP/1.1" 200 1794


ALLOW IN=104.127.59.236 OUT= PROTO=TCP DPT=443


ALLOW IN=197.105.48.114 OUT= PROTO=TCP DPT=80


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


ALLOW IN=46.44.195.134 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.1.185 port 51073 ssh2


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/passwd root


88.46.120.77 - - "GET /login HTTP/1.1" 200 7240


73.109.79.48 - - "GET /health HTTP/1.1" 200 6412


ALLOW IN=51.9.177.176 OUT= PROTO=TCP DPT=443


ALLOW IN=209.106.19.35 OUT= PROTO=TCP DPT=80


12.206.28.248 - - "GET /dashboard HTTP/1.1" 200 3096


209.141.56.12 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 500 358


ALLOW IN=209.89.234.250 OUT= PROTO=TCP DPT=80


158.254.90.126 - - "GET /dashboard HTTP/1.1" 200 3978


Accepted password for deploy from 10.0.3.248 port 55458 ssh2


201.19.126.56 - - "GET /health HTTP/1.1" 200 7221


OUTBOUND src=10.0.0.132 dst=91.219.236.18 bytes=3891265536 proto=TCP dport=443 duration=488s


Accepted password for admin from 10.0.0.149 port 47901 ssh2


Accepted password for nattapong from 10.0.4.33 port 54902 ssh2


160.255.216.113 - - "GET /api/orders?page=2 HTTP/1.1" 200 7827


188.52.86.17 - - "GET /api/products HTTP/1.1" 200 1830


Accepted password for root from 10.0.1.169 port 55634 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


33.64.69.4 - - "GET /login HTTP/1.1" 200 1116


54.95.0.119 - - "GET /api/products HTTP/1.1" 200 4957


Accepted password for www-data from 10.0.5.58 port 44607 ssh2


Accepted password for deploy from 10.0.1.171 port 47306 ssh2


193.27.228.114 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 110


Accepted password for nattapong from 10.0.3.82 port 42377 ssh2


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=250 interval=300s


193.253.65.51 - - "GET /health HTTP/1.1" 200 848


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=820 interval=300s


16.1.234.79 - - "GET /api/orders?page=2 HTTP/1.1" 200 5768


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=708 interval=300s


ALLOW IN=52.235.205.45 OUT= PROTO=TCP DPT=80


Accepted password for somchai from 10.0.5.201 port 41557 ssh2


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=493 interval=300s


62.205.168.17 - - "GET /api/products HTTP/1.1" 200 3005


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=435 interval=300s


ALLOW IN=223.77.214.3 OUT= PROTO=TCP DPT=80


ALLOW IN=133.175.13.151 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.2.154 port 40534 ssh2


ALLOW IN=47.200.237.245 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=821 interval=300s


136.135.46.165 - - "GET /static/app.js HTTP/1.1" 200 3374


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=560 interval=300s


Accepted password for root from 10.0.0.120 port 59713 ssh2


77.31.80.226 - - "GET /api/products HTTP/1.1" 200 5244


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=424 interval=300s


21.80.144.78 - - "GET / HTTP/1.1" 200 2084


ALLOW IN=46.174.87.103 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=851 interval=300s


Accepted password for oppa from 10.0.1.53 port 53163 ssh2


CONN src=10.0.0.146 dst=185.220.101.34 dport=443 bytes=394 interval=300s


109.52.72.180 - - "GET / HTTP/1.1" 200 7493


56.122.204.23 - - "GET / HTTP/1.1" 200 7182


ALLOW IN=109.87.181.148 OUT= PROTO=TCP DPT=80


149.42.72.208 - - "GET /static/app.js HTTP/1.1" 200 1296


208.152.226.110 - - "GET /health HTTP/1.1" 200 240


ALLOW IN=66.39.166.203 OUT= PROTO=TCP DPT=443


209.141.56.12 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 154


ALLOW IN=177.196.75.182 OUT= PROTO=TCP DPT=80


OUTBOUND src=10.0.4.78 dst=91.219.236.18 bytes=8055160832 proto=TCP dport=443 duration=447s


Accepted password for oppa from 10.0.1.179 port 56991 ssh2


ALLOW IN=31.202.158.191 OUT= PROTO=TCP DPT=443


ALLOW IN=20.232.45.81 OUT= PROTO=TCP DPT=443


ALLOW IN=24.245.171.174 OUT= PROTO=TCP DPT=443


Failed password for postgres from 209.141.56.12 port 40233 ssh2


ALLOW IN=213.18.106.57 OUT= PROTO=TCP DPT=80


Failed password for postgres from 209.141.56.12 port 50940 ssh2


Failed password for postgres from 209.141.56.12 port 50543 ssh2


Failed password for postgres from 209.141.56.12 port 42960 ssh2


Failed password for postgres from 209.141.56.12 port 50954 ssh2


Failed password for postgres from 209.141.56.12 port 49564 ssh2


Failed password for postgres from 209.141.56.12 port 59162 ssh2


Failed password for postgres from 209.141.56.12 port 48071 ssh2


Failed password for postgres from 209.141.56.12 port 52306 ssh2


122.14.251.116 - - "GET /login HTTP/1.1" 200 5407


210.88.255.220 - - "GET / HTTP/1.1" 200 2934


ALLOW IN=73.70.61.7 OUT= PROTO=TCP DPT=80


13.53.56.136 - - "GET /api/products HTTP/1.1" 200 2347


ALLOW IN=67.228.182.24 OUT= PROTO=TCP DPT=443


130.177.149.38 - - "GET /health HTTP/1.1" 200 5710


ALLOW IN=46.13.62.223 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.5.237 port 47864 ssh2


Accepted password for www-data from 10.0.4.147 port 52499 ssh2


Accepted password for guest from 10.0.1.155 port 53586 ssh2


Failed password for somchai from 122.125.237.172 port 53389 ssh2


Failed password for somchai from 122.125.237.172 port 49720 ssh2


Failed password for somchai from 122.125.237.172 port 54138 ssh2


Failed password for somchai from 122.125.237.172 port 45894 ssh2


Failed password for somchai from 122.125.237.172 port 58062 ssh2


Failed password for somchai from 122.125.237.172 port 42490 ssh2


Failed password for somchai from 122.125.237.172 port 46709 ssh2


Failed password for somchai from 122.125.237.172 port 48493 ssh2


Failed password for somchai from 122.125.237.172 port 57639 ssh2


Failed password for somchai from 122.125.237.172 port 43181 ssh2


Failed password for somchai from 122.125.237.172 port 56854 ssh2


Failed password for somchai from 122.125.237.172 port 43505 ssh2


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 298


ALLOW IN=44.233.105.47 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.1.144 port 56914 ssh2


Failed password for oppa from 185.220.101.34 port 49794 ssh2


Failed password for oppa from 185.220.101.34 port 43508 ssh2


Failed password for oppa from 185.220.101.34 port 58788 ssh2


Failed password for oppa from 185.220.101.34 port 45018 ssh2


Failed password for oppa from 185.220.101.34 port 42801 ssh2


Failed password for oppa from 185.220.101.34 port 53394 ssh2


Failed password for oppa from 185.220.101.34 port 57390 ssh2


Failed password for oppa from 185.220.101.34 port 45031 ssh2


Failed password for oppa from 185.220.101.34 port 56289 ssh2


Failed password for oppa from 185.220.101.34 port 50517 ssh2


Failed password for oppa from 185.220.101.34 port 51941 ssh2


Failed password for oppa from 185.220.101.34 port 41395 ssh2


Failed password for oppa from 185.220.101.34 port 47127 ssh2


Failed password for oppa from 185.220.101.34 port 48057 ssh2


Accepted password for admin from 10.0.1.132 port 56373 ssh2


154.103.39.152 - - "GET /login HTTP/1.1" 200 1043


ALLOW IN=92.195.144.115 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.2.8 port 45380 ssh2


Accepted password for postgres from 10.0.5.209 port 50892 ssh2


ALLOW IN=222.0.236.106 OUT= PROTO=TCP DPT=80


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/bash


Accepted password for svc_backup from 10.0.0.236 port 55742 ssh2


Accepted password for somchai from 10.0.3.187 port 56354 ssh2


Failed password for svc_backup from 45.137.21.9 port 54911 ssh2


Failed password for svc_backup from 45.137.21.9 port 46716 ssh2


Failed password for svc_backup from 45.137.21.9 port 49875 ssh2


Failed password for svc_backup from 45.137.21.9 port 57396 ssh2


Failed password for svc_backup from 45.137.21.9 port 47471 ssh2


Failed password for svc_backup from 45.137.21.9 port 54183 ssh2


Accepted password for oppa from 10.0.2.34 port 58831 ssh2


Failed password for svc_backup from 45.137.21.9 port 48811 ssh2


Failed password for svc_backup from 45.137.21.9 port 56958 ssh2


Failed password for svc_backup from 45.137.21.9 port 46431 ssh2


Failed password for svc_backup from 45.137.21.9 port 55153 ssh2


Failed password for svc_backup from 45.137.21.9 port 43856 ssh2


Failed password for svc_backup from 45.137.21.9 port 49330 ssh2


Failed password for svc_backup from 45.137.21.9 port 48595 ssh2


Failed password for svc_backup from 45.137.21.9 port 46052 ssh2


Failed password for svc_backup from 45.137.21.9 port 40237 ssh2


Failed password for svc_backup from 45.137.21.9 port 58156 ssh2


Failed password for svc_backup from 45.137.21.9 port 44236 ssh2


Failed password for svc_backup from 45.137.21.9 port 48051 ssh2


Failed password for svc_backup from 45.137.21.9 port 41892 ssh2


Failed password for svc_backup from 45.137.21.9 port 40324 ssh2


Failed password for svc_backup from 45.137.21.9 port 48023 ssh2


Failed password for svc_backup from 45.137.21.9 port 52778 ssh2


ALLOW IN=116.147.137.64 OUT= PROTO=TCP DPT=80


Failed password for svc_backup from 45.137.21.9 port 42710 ssh2


111.201.51.57 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 105


ALLOW IN=201.249.155.159 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.4.119 port 40505 ssh2


Failed password for deploy from 193.27.228.114 port 52398 ssh2


Failed password for deploy from 193.27.228.114 port 54953 ssh2


Failed password for deploy from 193.27.228.114 port 42712 ssh2


Failed password for deploy from 193.27.228.114 port 55478 ssh2


Failed password for deploy from 193.27.228.114 port 56962 ssh2


Failed password for deploy from 193.27.228.114 port 57096 ssh2


Failed password for deploy from 193.27.228.114 port 40066 ssh2


Failed password for deploy from 193.27.228.114 port 43800 ssh2


Failed password for deploy from 193.27.228.114 port 49853 ssh2


Failed password for deploy from 193.27.228.114 port 44256 ssh2


Failed password for deploy from 193.27.228.114 port 42121 ssh2


Failed password for deploy from 193.27.228.114 port 59088 ssh2


Failed password for deploy from 193.27.228.114 port 58892 ssh2


Failed password for deploy from 193.27.228.114 port 55359 ssh2


Failed password for deploy from 193.27.228.114 port 58902 ssh2


Failed password for deploy from 193.27.228.114 port 43907 ssh2


Failed password for deploy from 193.27.228.114 port 49096 ssh2


Failed password for deploy from 193.27.228.114 port 48447 ssh2


Failed password for deploy from 193.27.228.114 port 52511 ssh2


Failed password for deploy from 193.27.228.114 port 42677 ssh2


Failed password for deploy from 193.27.228.114 port 47900 ssh2


142.167.44.103 - - "GET /api/orders?page=2 HTTP/1.1" 200 981


65.232.134.140 - - "GET /dashboard HTTP/1.1" 200 1165


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


165.107.243.220 - - "GET /health HTTP/1.1" 200 240


ALLOW IN=169.189.119.81 OUT= PROTO=TCP DPT=443


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


ALLOW IN=167.142.49.167 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


ALLOW IN=103.16.58.18 OUT= PROTO=TCP DPT=80


153.123.243.166 - - "GET /api/orders?page=2 HTTP/1.1" 200 4220


169.10.170.217 - - "GET /login HTTP/1.1" 200 4075


Failed password for nattapong from 45.137.21.9 port 47129 ssh2


Failed password for nattapong from 45.137.21.9 port 51926 ssh2


Failed password for nattapong from 45.137.21.9 port 57127 ssh2


Failed password for nattapong from 45.137.21.9 port 45129 ssh2


Failed password for nattapong from 45.137.21.9 port 58936 ssh2


Failed password for nattapong from 45.137.21.9 port 46942 ssh2


Failed password for nattapong from 45.137.21.9 port 49455 ssh2


Failed password for nattapong from 45.137.21.9 port 40772 ssh2


Failed password for nattapong from 45.137.21.9 port 49877 ssh2


Failed password for nattapong from 45.137.21.9 port 53929 ssh2


Failed password for nattapong from 45.137.21.9 port 43686 ssh2


Failed password for nattapong from 45.137.21.9 port 50367 ssh2


Failed password for nattapong from 45.137.21.9 port 41535 ssh2


Failed password for nattapong from 45.137.21.9 port 43307 ssh2


Failed password for nattapong from 45.137.21.9 port 57635 ssh2


Failed password for nattapong from 45.137.21.9 port 49595 ssh2


Failed password for nattapong from 45.137.21.9 port 42161 ssh2


Failed password for nattapong from 45.137.21.9 port 42335 ssh2


Failed password for nattapong from 45.137.21.9 port 55606 ssh2


Failed password for nattapong from 45.137.21.9 port 42444 ssh2


Failed password for nattapong from 45.137.21.9 port 49528 ssh2


Failed password for nattapong from 45.137.21.9 port 51951 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Failed password for nattapong from 45.137.21.9 port 58024 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Accepted password for admin from 10.0.4.232 port 59475 ssh2


Failed password for guest from 209.141.56.12 port 40620 ssh2


Failed password for guest from 209.141.56.12 port 42603 ssh2


Failed password for guest from 209.141.56.12 port 42771 ssh2


Failed password for guest from 209.141.56.12 port 54394 ssh2


Failed password for guest from 209.141.56.12 port 49632 ssh2


Failed password for guest from 209.141.56.12 port 59696 ssh2


Failed password for guest from 209.141.56.12 port 58943 ssh2


Failed password for guest from 209.141.56.12 port 42754 ssh2


Failed password for guest from 209.141.56.12 port 52690 ssh2


Failed password for guest from 209.141.56.12 port 41691 ssh2


Failed password for guest from 209.141.56.12 port 53843 ssh2


Failed password for guest from 209.141.56.12 port 44830 ssh2


Failed password for guest from 209.141.56.12 port 46828 ssh2


Failed password for guest from 209.141.56.12 port 51477 ssh2


Failed password for guest from 209.141.56.12 port 56505 ssh2


Failed password for guest from 209.141.56.12 port 41598 ssh2


Failed password for guest from 209.141.56.12 port 53597 ssh2


Failed password for guest from 209.141.56.12 port 56047 ssh2


Accepted password for guest from 209.141.56.12 port 51234 ssh2


Failed password for guest from 209.141.56.12 port 52322 ssh2


Failed password for somchai from 209.141.56.12 port 42408 ssh2


Failed password for somchai from 209.141.56.12 port 54787 ssh2


Failed password for somchai from 209.141.56.12 port 50983 ssh2


Failed password for somchai from 209.141.56.12 port 43022 ssh2


Failed password for somchai from 209.141.56.12 port 53705 ssh2


Failed password for somchai from 209.141.56.12 port 57028 ssh2


Failed password for somchai from 209.141.56.12 port 41195 ssh2


Failed password for somchai from 209.141.56.12 port 44220 ssh2


Failed password for somchai from 209.141.56.12 port 49632 ssh2


Failed password for somchai from 209.141.56.12 port 46322 ssh2


Failed password for somchai from 209.141.56.12 port 57047 ssh2


Failed password for somchai from 209.141.56.12 port 40696 ssh2


Failed password for somchai from 209.141.56.12 port 51839 ssh2


Failed password for somchai from 209.141.56.12 port 47787 ssh2


Failed password for somchai from 209.141.56.12 port 52657 ssh2


Failed password for somchai from 209.141.56.12 port 53344 ssh2


Failed password for somchai from 209.141.56.12 port 52959 ssh2


Failed password for somchai from 209.141.56.12 port 54266 ssh2


Failed password for somchai from 209.141.56.12 port 41404 ssh2


Failed password for somchai from 209.141.56.12 port 40588 ssh2


Failed password for somchai from 209.141.56.12 port 41519 ssh2


Failed password for somchai from 209.141.56.12 port 53036 ssh2


Failed password for somchai from 209.141.56.12 port 43145 ssh2


Accepted password for somchai from 209.141.56.12 port 51234 ssh2


Failed password for somchai from 209.141.56.12 port 42896 ssh2


156.6.9.102 - - "GET /static/app.js HTTP/1.1" 200 3710


ALLOW IN=160.70.133.204 OUT= PROTO=TCP DPT=443


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Accepted password for svc_backup from 10.0.3.3 port 56374 ssh2


ALLOW IN=64.99.69.127 OUT= PROTO=TCP DPT=443


187.240.149.9 - - "GET /login HTTP/1.1" 200 2560


223.108.167.187 - - "GET /login HTTP/1.1" 200 4153


ALLOW IN=139.35.22.11 OUT= PROTO=TCP DPT=443


Failed password for svc_backup from 112.182.76.62 port 48630 ssh2


Failed password for svc_backup from 112.182.76.62 port 48000 ssh2


Failed password for svc_backup from 112.182.76.62 port 50929 ssh2


Failed password for svc_backup from 112.182.76.62 port 44264 ssh2


Failed password for svc_backup from 112.182.76.62 port 48060 ssh2


Failed password for svc_backup from 112.182.76.62 port 40441 ssh2


Failed password for svc_backup from 112.182.76.62 port 53849 ssh2


Failed password for svc_backup from 112.182.76.62 port 48527 ssh2


Failed password for svc_backup from 112.182.76.62 port 45907 ssh2


Failed password for svc_backup from 112.182.76.62 port 41963 ssh2


Failed password for svc_backup from 112.182.76.62 port 54084 ssh2


Failed password for svc_backup from 112.182.76.62 port 40947 ssh2


Failed password for svc_backup from 112.182.76.62 port 59166 ssh2


Failed password for svc_backup from 112.182.76.62 port 42549 ssh2


Failed password for svc_backup from 112.182.76.62 port 42578 ssh2


Accepted password for svc_backup from 112.182.76.62 port 51234 ssh2


Failed password for svc_backup from 112.182.76.62 port 48045 ssh2


Failed password for svc_backup from 112.182.76.62 port 51851 ssh2


ALLOW IN=114.210.9.38 OUT= PROTO=TCP DPT=443


ALLOW IN=136.212.227.126 OUT= PROTO=TCP DPT=80


117.182.48.142 - - "GET /static/app.js HTTP/1.1" 200 4578


ALLOW IN=65.116.83.109 OUT= PROTO=TCP DPT=443


ALLOW IN=16.4.242.234 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.1.139 port 46756 ssh2


ALLOW IN=147.8.86.186 OUT= PROTO=TCP DPT=443


31.3.125.226 - - "GET /static/app.js HTTP/1.1" 200 2478


18.13.215.23 - - "GET /health HTTP/1.1" 200 1351


Accepted password for deploy from 10.0.4.131 port 42327 ssh2


51.56.66.138 - - "GET /dashboard HTTP/1.1" 200 4117


Accepted password for deploy from 10.0.5.194 port 57849 ssh2


149.30.139.253 - - "GET /health HTTP/1.1" 200 6423


218.184.80.49 - - "GET / HTTP/1.1" 200 6954


Accepted password for root from 10.0.0.161 port 55133 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Accepted password for www-data from 10.0.1.20 port 55433 ssh2


92.214.35.156 - - "GET /login HTTP/1.1" 200 1235


Accepted password for www-data from 10.0.5.139 port 44820 ssh2


Accepted password for nattapong from 10.0.4.60 port 50539 ssh2


ALLOW IN=189.250.201.138 OUT= PROTO=TCP DPT=80


57.129.143.97 - - "GET /static/app.js HTTP/1.1" 200 2033


194.241.51.175 - - "GET /health HTTP/1.1" 200 1326


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


ALLOW IN=103.115.134.105 OUT= PROTO=TCP DPT=80


104.178.97.83 - - "GET /api/products HTTP/1.1" 200 5065


Failed password for root from 209.141.56.12 port 57564 ssh2


Failed password for root from 209.141.56.12 port 58032 ssh2


Failed password for root from 209.141.56.12 port 57162 ssh2


Failed password for root from 209.141.56.12 port 42059 ssh2


Failed password for root from 209.141.56.12 port 59823 ssh2


Failed password for root from 209.141.56.12 port 46374 ssh2


Failed password for root from 209.141.56.12 port 46568 ssh2


Failed password for root from 209.141.56.12 port 56415 ssh2


Failed password for root from 209.141.56.12 port 45512 ssh2


Failed password for root from 209.141.56.12 port 55690 ssh2


Failed password for root from 209.141.56.12 port 56056 ssh2


Failed password for root from 209.141.56.12 port 48972 ssh2


Failed password for root from 209.141.56.12 port 56258 ssh2


Failed password for root from 209.141.56.12 port 49612 ssh2


Failed password for root from 209.141.56.12 port 46578 ssh2


Failed password for root from 209.141.56.12 port 56147 ssh2


Failed password for root from 209.141.56.12 port 59481 ssh2


Failed password for root from 209.141.56.12 port 48645 ssh2


Failed password for root from 209.141.56.12 port 48496 ssh2


Failed password for root from 209.141.56.12 port 53903 ssh2


Failed password for root from 209.141.56.12 port 42565 ssh2


Failed password for root from 209.141.56.12 port 50970 ssh2


Failed password for root from 209.141.56.12 port 54563 ssh2


Failed password for root from 209.141.56.12 port 52689 ssh2


Failed password for root from 209.141.56.12 port 48686 ssh2


97.11.214.196 - - "GET /login HTTP/1.1" 200 2252


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


ALLOW IN=44.140.136.119 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.0.199 port 54762 ssh2


141.27.182.195 - - "GET / HTTP/1.1" 200 2670


ALLOW IN=72.2.212.9 OUT= PROTO=TCP DPT=80


ALLOW IN=219.147.12.59 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.1.216 port 59568 ssh2


136.81.104.184 - - "GET /static/app.js HTTP/1.1" 200 3994


Failed password for guest from 209.141.56.12 port 44615 ssh2


Failed password for guest from 209.141.56.12 port 49194 ssh2


Failed password for guest from 209.141.56.12 port 45013 ssh2


Failed password for guest from 209.141.56.12 port 59089 ssh2


Failed password for guest from 209.141.56.12 port 55263 ssh2


Failed password for guest from 209.141.56.12 port 49899 ssh2


Failed password for guest from 209.141.56.12 port 50437 ssh2


Failed password for guest from 209.141.56.12 port 45084 ssh2


Failed password for guest from 209.141.56.12 port 42938 ssh2


Failed password for guest from 209.141.56.12 port 49373 ssh2


Failed password for guest from 209.141.56.12 port 57582 ssh2


Failed password for guest from 209.141.56.12 port 45307 ssh2


Failed password for guest from 209.141.56.12 port 55967 ssh2


Failed password for guest from 209.141.56.12 port 46170 ssh2


Failed password for guest from 209.141.56.12 port 41537 ssh2


Failed password for guest from 209.141.56.12 port 53832 ssh2


Failed password for guest from 209.141.56.12 port 51086 ssh2


Accepted password for guest from 209.141.56.12 port 51234 ssh2


Failed password for guest from 209.141.56.12 port 59972 ssh2


45.137.21.9 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 499


193.27.228.114 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 392


Accepted password for root from 10.0.1.238 port 54649 ssh2


ALLOW IN=62.154.156.22 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.4.251 port 51816 ssh2


OUTBOUND src=10.0.1.131 dst=193.27.228.114 bytes=1615855616 proto=TCP dport=443 duration=556s


Accepted password for deploy from 10.0.2.78 port 41167 ssh2


Accepted password for deploy from 10.0.1.193 port 47074 ssh2


Accepted password for root from 10.0.4.34 port 44761 ssh2


Accepted password for deploy from 10.0.3.224 port 44253 ssh2


59.14.114.36 - - "GET /static/app.js HTTP/1.1" 200 5278


147.40.178.54 - - "GET /static/app.js HTTP/1.1" 200 7864


Accepted password for postgres from 10.0.1.238 port 57616 ssh2


ALLOW IN=147.126.153.90 OUT= PROTO=TCP DPT=443


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 244


ALLOW IN=16.207.207.67 OUT= PROTO=TCP DPT=80


ALLOW IN=44.188.220.55 OUT= PROTO=TCP DPT=80


36.181.184.243 - - "GET /api/products HTTP/1.1" 200 7052


CONN src=10.0.1.155 dst=209.141.56.12 dport=443 bytes=556 interval=60s


Accepted password for www-data from 10.0.5.55 port 48225 ssh2


CONN src=10.0.1.155 dst=209.141.56.12 dport=443 bytes=414 interval=60s


CONN src=10.0.1.155 dst=209.141.56.12 dport=443 bytes=395 interval=60s


CONN src=10.0.1.155 dst=209.141.56.12 dport=443 bytes=895 interval=60s


CONN src=10.0.1.155 dst=209.141.56.12 dport=443 bytes=790 interval=60s


CONN src=10.0.1.155 dst=209.141.56.12 dport=443 bytes=214 interval=60s


99.185.41.175 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 5


ALLOW IN=36.138.70.108 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.4.142 port 44052 ssh2


ALLOW IN=22.182.125.2 OUT= PROTO=TCP DPT=443


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


45.137.21.9 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 382


ALLOW IN=142.215.136.6 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.2.164 dst=185.220.101.34 bytes=2036334592 proto=TCP dport=443 duration=145s


Accepted password for deploy from 10.0.1.20 port 42873 ssh2


Failed password for somchai from 185.220.101.34 port 54083 ssh2


Failed password for somchai from 185.220.101.34 port 47552 ssh2


Failed password for somchai from 185.220.101.34 port 59780 ssh2


Failed password for somchai from 185.220.101.34 port 44971 ssh2


Failed password for somchai from 185.220.101.34 port 58143 ssh2


Failed password for somchai from 185.220.101.34 port 45630 ssh2


Failed password for somchai from 185.220.101.34 port 48740 ssh2


Failed password for somchai from 185.220.101.34 port 42987 ssh2


Failed password for somchai from 185.220.101.34 port 51585 ssh2


Failed password for somchai from 185.220.101.34 port 48067 ssh2


Failed password for somchai from 185.220.101.34 port 46656 ssh2


Failed password for somchai from 185.220.101.34 port 50378 ssh2


Failed password for somchai from 185.220.101.34 port 44081 ssh2


Failed password for somchai from 185.220.101.34 port 40571 ssh2


Failed password for somchai from 185.220.101.34 port 47240 ssh2


Accepted password for somchai from 185.220.101.34 port 51234 ssh2


Failed password for somchai from 185.220.101.34 port 48838 ssh2


ALLOW IN=55.85.177.60 OUT= PROTO=TCP DPT=80


132.163.77.171 - - "GET /health HTTP/1.1" 200 4367


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 235


151.228.203.8 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 200 302


ALLOW IN=167.164.113.210 OUT= PROTO=TCP DPT=80


ALLOW IN=12.255.121.183 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.4.216 dst=193.27.228.114 bytes=7350517760 proto=TCP dport=443 duration=515s


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


ALLOW IN=47.104.36.162 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.0.46 port 44985 ssh2


148.126.177.143 - - "GET /api/products HTTP/1.1" 200 6035


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 181


Failed password for admin from 209.141.56.12 port 50122 ssh2


Failed password for admin from 209.141.56.12 port 51519 ssh2


Failed password for admin from 209.141.56.12 port 57666 ssh2


Failed password for admin from 209.141.56.12 port 55317 ssh2


Failed password for admin from 209.141.56.12 port 50483 ssh2


Failed password for admin from 209.141.56.12 port 41828 ssh2


Failed password for admin from 209.141.56.12 port 42128 ssh2


Failed password for admin from 209.141.56.12 port 44398 ssh2


Failed password for admin from 209.141.56.12 port 46541 ssh2


Failed password for admin from 209.141.56.12 port 50642 ssh2


Failed password for admin from 209.141.56.12 port 58936 ssh2


Failed password for admin from 209.141.56.12 port 42493 ssh2


Failed password for admin from 209.141.56.12 port 52560 ssh2


Failed password for admin from 209.141.56.12 port 45868 ssh2


Failed password for admin from 209.141.56.12 port 48754 ssh2


Failed password for admin from 209.141.56.12 port 42313 ssh2


Accepted password for admin from 209.141.56.12 port 51234 ssh2


Failed password for admin from 209.141.56.12 port 45748 ssh2


130.221.209.95 - - "GET /health HTTP/1.1" 200 4275


Accepted password for deploy from 10.0.4.158 port 51382 ssh2


Accepted password for oppa from 10.0.1.142 port 53158 ssh2


Accepted password for nattapong from 10.0.3.218 port 53453 ssh2


63.71.112.179 - - "GET /api/orders?page=2 HTTP/1.1" 200 932


Failed password for svc_backup from 185.220.101.34 port 48259 ssh2


Failed password for svc_backup from 185.220.101.34 port 59708 ssh2


Failed password for svc_backup from 185.220.101.34 port 41417 ssh2


Failed password for svc_backup from 185.220.101.34 port 55858 ssh2


Failed password for svc_backup from 185.220.101.34 port 49859 ssh2


Failed password for svc_backup from 185.220.101.34 port 51237 ssh2


Failed password for svc_backup from 185.220.101.34 port 52380 ssh2


Failed password for svc_backup from 185.220.101.34 port 44130 ssh2


Failed password for svc_backup from 185.220.101.34 port 58305 ssh2


Failed password for svc_backup from 185.220.101.34 port 50603 ssh2


Failed password for svc_backup from 185.220.101.34 port 52262 ssh2


Failed password for svc_backup from 185.220.101.34 port 50335 ssh2


Failed password for svc_backup from 185.220.101.34 port 45924 ssh2


Failed password for svc_backup from 185.220.101.34 port 59955 ssh2


Failed password for svc_backup from 185.220.101.34 port 59574 ssh2


Failed password for svc_backup from 185.220.101.34 port 55652 ssh2


Failed password for svc_backup from 185.220.101.34 port 45841 ssh2


Accepted password for svc_backup from 185.220.101.34 port 51234 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


209.141.56.12 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 334


221.139.229.15 - - "GET /api/orders?page=2 HTTP/1.1" 200 7479


ALLOW IN=161.244.21.174 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.1.14 port 48524 ssh2


185.60.232.123 - - "GET /api/orders?page=2 HTTP/1.1" 200 700


115.234.185.242 - - "GET / HTTP/1.1" 200 3825


185.220.101.34 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 195


ALLOW IN=77.76.45.246 OUT= PROTO=TCP DPT=443


ALLOW IN=51.213.253.56 OUT= PROTO=TCP DPT=443


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


ALLOW IN=148.214.181.238 OUT= PROTO=TCP DPT=80


ALLOW IN=174.25.152.92 OUT= PROTO=TCP DPT=80


ALLOW IN=114.236.232.104 OUT= PROTO=TCP DPT=80


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Accepted password for oppa from 10.0.0.124 port 49340 ssh2


91.219.236.18 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 291


ALLOW IN=113.250.27.254 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.4.82 port 44083 ssh2


Accepted password for oppa from 10.0.5.221 port 40318 ssh2


ALLOW IN=131.252.52.87 OUT= PROTO=TCP DPT=443


124.5.99.115 - - "GET /api/orders?page=2 HTTP/1.1" 200 3452


ALLOW IN=56.236.218.140 OUT= PROTO=TCP DPT=443


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/bash


144.223.150.33 - - "GET /health HTTP/1.1" 200 3825


ALLOW IN=134.90.88.188 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.41 dst=185.220.101.34 dport=443 bytes=321 interval=60s


CONN src=10.0.0.41 dst=185.220.101.34 dport=443 bytes=229 interval=60s


CONN src=10.0.0.41 dst=185.220.101.34 dport=443 bytes=598 interval=60s


147.211.87.162 - - "GET / HTTP/1.1" 200 7943


CONN src=10.0.0.41 dst=185.220.101.34 dport=443 bytes=440 interval=60s


CONN src=10.0.0.41 dst=185.220.101.34 dport=443 bytes=678 interval=60s


CONN src=10.0.0.41 dst=185.220.101.34 dport=443 bytes=770 interval=60s


ALLOW IN=58.198.34.105 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.2.92 port 56795 ssh2


Accepted password for deploy from 10.0.0.197 port 52498 ssh2


157.64.50.84 - - "GET / HTTP/1.1" 200 6047


48.245.47.127 - - "GET /login HTTP/1.1" 200 3963


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


ALLOW IN=177.207.18.104 OUT= PROTO=TCP DPT=443


Accepted password for nattapong from 10.0.2.194 port 48576 ssh2


ALLOW IN=87.207.109.110 OUT= PROTO=TCP DPT=443


ALLOW IN=47.15.57.224 OUT= PROTO=TCP DPT=443


ALLOW IN=94.196.152.41 OUT= PROTO=TCP DPT=80


ALLOW IN=164.197.228.55 OUT= PROTO=TCP DPT=80


113.152.229.152 - - "GET /dashboard HTTP/1.1" 200 7764


ALLOW IN=100.91.12.222 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.3.73 port 47354 ssh2


176.18.103.41 - - "GET /api/products HTTP/1.1" 200 1317


202.95.141.129 - - "GET /api/orders?page=2 HTTP/1.1" 200 574


90.73.100.158 - - "GET /api/products HTTP/1.1" 200 283


Accepted password for deploy from 10.0.2.40 port 44187 ssh2


ALLOW IN=111.165.71.154 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.0.35 port 58150 ssh2


ALLOW IN=13.119.46.39 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.0.36 port 43275 ssh2


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/su -


Accepted password for deploy from 10.0.0.217 port 48053 ssh2


Accepted password for nattapong from 10.0.3.54 port 43855 ssh2


198.59.212.193 - - "GET /login HTTP/1.1" 200 7134


ALLOW IN=136.166.234.228 OUT= PROTO=TCP DPT=80


Accepted password for oppa from 10.0.2.193 port 54220 ssh2


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 403


134.237.104.88 - - "GET /static/app.js HTTP/1.1" 200 1376


ALLOW IN=195.136.73.37 OUT= PROTO=TCP DPT=80


Accepted password for somchai from 10.0.5.91 port 56700 ssh2


ALLOW IN=56.251.34.138 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.1.177 port 52249 ssh2


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 490


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/bash


118.77.211.177 - - "GET /login HTTP/1.1" 200 3561


128.220.62.169 - - "GET /api/orders?page=2 HTTP/1.1" 200 7419


105.50.25.167 - - "GET /dashboard HTTP/1.1" 200 6196


ALLOW IN=162.55.49.231 OUT= PROTO=TCP DPT=80


Accepted password for admin from 10.0.2.136 port 54042 ssh2


ALLOW IN=144.175.88.182 OUT= PROTO=TCP DPT=443


ALLOW IN=88.140.28.91 OUT= PROTO=TCP DPT=80


ALLOW IN=211.167.47.175 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.5.164 port 57915 ssh2


ALLOW IN=185.182.33.112 OUT= PROTO=TCP DPT=80


Accepted password for somchai from 10.0.4.94 port 41715 ssh2


Accepted password for svc_backup from 10.0.4.141 port 59771 ssh2


ALLOW IN=195.43.220.110 OUT= PROTO=TCP DPT=80


45.137.21.9 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 403 383


45.137.21.9 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 492


Accepted password for admin from 10.0.2.33 port 41399 ssh2


ALLOW IN=95.68.142.82 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.3.192 port 42406 ssh2


ALLOW IN=159.16.148.219 OUT= PROTO=TCP DPT=443


ALLOW IN=125.45.255.115 OUT= PROTO=TCP DPT=443


ALLOW IN=87.69.11.114 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.4.162 port 59256 ssh2


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Failed password for oppa from 193.27.228.114 port 54281 ssh2


Failed password for oppa from 193.27.228.114 port 51722 ssh2


Failed password for oppa from 193.27.228.114 port 59125 ssh2


Failed password for oppa from 193.27.228.114 port 55385 ssh2


Failed password for oppa from 193.27.228.114 port 44771 ssh2


72.206.7.82 - - "GET /health HTTP/1.1" 200 2919


Failed password for oppa from 193.27.228.114 port 59769 ssh2


Failed password for oppa from 193.27.228.114 port 47778 ssh2


Failed password for oppa from 193.27.228.114 port 49537 ssh2


Failed password for oppa from 193.27.228.114 port 53830 ssh2


Failed password for oppa from 193.27.228.114 port 40264 ssh2


Failed password for oppa from 193.27.228.114 port 46594 ssh2


Failed password for oppa from 193.27.228.114 port 51191 ssh2


Failed password for oppa from 193.27.228.114 port 55588 ssh2


Failed password for oppa from 193.27.228.114 port 59216 ssh2


Failed password for oppa from 193.27.228.114 port 46403 ssh2


Failed password for oppa from 193.27.228.114 port 44738 ssh2


Failed password for oppa from 193.27.228.114 port 58332 ssh2


212.230.132.146 - - "GET /api/products HTTP/1.1" 200 5069


Accepted password for svc_backup from 10.0.0.253 port 52036 ssh2


100.194.163.150 - - "GET / HTTP/1.1" 200 4143


209.141.56.12 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 402


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=258 interval=60s


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=513 interval=60s


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=708 interval=60s


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=614 interval=60s


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=378 interval=60s


33.223.130.90 - - "GET /login HTTP/1.1" 200 2404


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=548 interval=60s


30.156.97.176 - - "GET /login HTTP/1.1" 200 5874


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=892 interval=60s


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=403 interval=60s


ALLOW IN=182.44.201.50 OUT= PROTO=TCP DPT=443


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=810 interval=60s


CONN src=10.0.1.91 dst=185.220.101.34 dport=443 bytes=572 interval=60s


67.145.128.50 - - "GET / HTTP/1.1" 200 394


Accepted password for root from 10.0.4.160 port 48053 ssh2


Accepted password for deploy from 10.0.3.62 port 43327 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Failed password for oppa from 185.220.101.34 port 41705 ssh2


Failed password for oppa from 185.220.101.34 port 52750 ssh2


Failed password for oppa from 185.220.101.34 port 44762 ssh2


Failed password for oppa from 185.220.101.34 port 40173 ssh2


Failed password for oppa from 185.220.101.34 port 48620 ssh2


Failed password for oppa from 185.220.101.34 port 52151 ssh2


Failed password for oppa from 185.220.101.34 port 59668 ssh2


Failed password for oppa from 185.220.101.34 port 59956 ssh2


Failed password for oppa from 185.220.101.34 port 52593 ssh2


Failed password for oppa from 185.220.101.34 port 42888 ssh2


Failed password for oppa from 185.220.101.34 port 45743 ssh2


Failed password for oppa from 185.220.101.34 port 56978 ssh2


Failed password for oppa from 185.220.101.34 port 59644 ssh2


Failed password for oppa from 185.220.101.34 port 57072 ssh2


Failed password for oppa from 185.220.101.34 port 59577 ssh2


97.89.148.78 - - "GET / HTTP/1.1" 200 6772


Failed password for oppa from 185.220.101.34 port 42845 ssh2


Failed password for oppa from 185.220.101.34 port 40350 ssh2


Failed password for oppa from 185.220.101.34 port 46381 ssh2


Failed password for oppa from 185.220.101.34 port 56199 ssh2


Failed password for oppa from 185.220.101.34 port 47839 ssh2


Failed password for oppa from 185.220.101.34 port 56902 ssh2


Failed password for oppa from 185.220.101.34 port 47591 ssh2


Failed password for oppa from 185.220.101.34 port 45553 ssh2


Failed password for oppa from 185.220.101.34 port 41181 ssh2


Failed password for oppa from 185.220.101.34 port 40009 ssh2


113.101.105.198 - - "GET /dashboard HTTP/1.1" 200 5035


ALLOW IN=157.101.240.132 OUT= PROTO=TCP DPT=443


ALLOW IN=54.32.108.136 OUT= PROTO=TCP DPT=443


170.50.67.47 - - "GET /dashboard HTTP/1.1" 200 3856


76.93.203.110 - - "GET /api/orders?page=2 HTTP/1.1" 200 5589


Accepted password for nattapong from 10.0.4.131 port 59437 ssh2


ALLOW IN=205.5.84.92 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.0.203 port 55152 ssh2


Failed password for oppa from 193.27.228.114 port 40637 ssh2


Failed password for oppa from 193.27.228.114 port 43016 ssh2


Failed password for oppa from 193.27.228.114 port 58527 ssh2


Failed password for oppa from 193.27.228.114 port 56124 ssh2


Failed password for oppa from 193.27.228.114 port 48635 ssh2


Failed password for oppa from 193.27.228.114 port 41562 ssh2


Failed password for oppa from 193.27.228.114 port 53018 ssh2


Failed password for oppa from 193.27.228.114 port 55536 ssh2


Failed password for oppa from 193.27.228.114 port 46502 ssh2


Failed password for oppa from 193.27.228.114 port 59719 ssh2


Failed password for oppa from 193.27.228.114 port 42200 ssh2


Accepted password for oppa from 193.27.228.114 port 51234 ssh2


Failed password for oppa from 193.27.228.114 port 57482 ssh2


138.230.122.96 - - "GET /health HTTP/1.1" 200 5231


Failed password for svc_backup from 45.137.21.9 port 49972 ssh2


Failed password for svc_backup from 45.137.21.9 port 54126 ssh2


Failed password for svc_backup from 45.137.21.9 port 51504 ssh2


Failed password for svc_backup from 45.137.21.9 port 49950 ssh2


Failed password for svc_backup from 45.137.21.9 port 42929 ssh2


Failed password for svc_backup from 45.137.21.9 port 53178 ssh2


Failed password for svc_backup from 45.137.21.9 port 59910 ssh2


Failed password for svc_backup from 45.137.21.9 port 59286 ssh2


Accepted password for oppa from 10.0.3.75 port 40109 ssh2


Failed password for svc_backup from 45.137.21.9 port 41599 ssh2


Failed password for svc_backup from 45.137.21.9 port 54381 ssh2


45.102.100.65 - - "GET /dashboard HTTP/1.1" 200 3784


17.65.64.138 - - "GET /dashboard HTTP/1.1" 200 2564


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/passwd root


ALLOW IN=36.211.231.111 OUT= PROTO=TCP DPT=443


CONN src=10.0.2.149 dst=45.137.21.9 dport=443 bytes=688 interval=300s


CONN src=10.0.2.149 dst=45.137.21.9 dport=443 bytes=799 interval=300s


200.83.70.233 - - "GET /login HTTP/1.1" 200 6889


OUTBOUND src=10.0.2.253 dst=45.137.21.9 bytes=6659506176 proto=TCP dport=443 duration=146s


CONN src=10.0.2.149 dst=45.137.21.9 dport=443 bytes=548 interval=300s


168.156.78.145 - - "GET /static/app.js HTTP/1.1" 200 3185


ALLOW IN=78.18.46.247 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.149 dst=45.137.21.9 dport=443 bytes=717 interval=300s


Accepted password for oppa from 10.0.2.4 port 45854 ssh2


CONN src=10.0.2.149 dst=45.137.21.9 dport=443 bytes=365 interval=300s


42.238.62.124 - - "GET /api/orders?page=2 HTTP/1.1" 200 5232


ALLOW IN=90.130.85.89 OUT= PROTO=TCP DPT=80


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/bin/su -


CONN src=10.0.2.149 dst=45.137.21.9 dport=443 bytes=807 interval=300s


Failed password for deploy from 185.220.101.34 port 40767 ssh2


Failed password for deploy from 185.220.101.34 port 58233 ssh2


Failed password for deploy from 185.220.101.34 port 52297 ssh2


Failed password for deploy from 185.220.101.34 port 56081 ssh2


Failed password for deploy from 185.220.101.34 port 43177 ssh2


Failed password for deploy from 185.220.101.34 port 43625 ssh2


Failed password for deploy from 185.220.101.34 port 59894 ssh2


Failed password for deploy from 185.220.101.34 port 45213 ssh2


Failed password for deploy from 185.220.101.34 port 44315 ssh2


Failed password for deploy from 185.220.101.34 port 47153 ssh2


Failed password for deploy from 185.220.101.34 port 53237 ssh2


Failed password for deploy from 185.220.101.34 port 47135 ssh2


Failed password for deploy from 185.220.101.34 port 49481 ssh2


Failed password for deploy from 185.220.101.34 port 59636 ssh2


Failed password for deploy from 185.220.101.34 port 50466 ssh2


Failed password for deploy from 185.220.101.34 port 43461 ssh2


Failed password for deploy from 185.220.101.34 port 53143 ssh2


Failed password for deploy from 185.220.101.34 port 53386 ssh2


Failed password for deploy from 185.220.101.34 port 50412 ssh2


Failed password for deploy from 185.220.101.34 port 57551 ssh2


Failed password for deploy from 185.220.101.34 port 52850 ssh2


Failed password for admin from 185.220.101.34 port 41424 ssh2


222.21.125.133 - - "GET /static/app.js HTTP/1.1" 200 3440


Failed password for admin from 185.220.101.34 port 43351 ssh2


Failed password for admin from 185.220.101.34 port 45439 ssh2


Failed password for admin from 185.220.101.34 port 42275 ssh2


Failed password for admin from 185.220.101.34 port 45888 ssh2


Failed password for admin from 185.220.101.34 port 40392 ssh2


Failed password for admin from 185.220.101.34 port 58976 ssh2


Failed password for admin from 185.220.101.34 port 53190 ssh2


Failed password for admin from 185.220.101.34 port 55984 ssh2


Failed password for admin from 185.220.101.34 port 41423 ssh2


Failed password for admin from 185.220.101.34 port 57768 ssh2


Failed password for admin from 185.220.101.34 port 40485 ssh2


Failed password for admin from 185.220.101.34 port 45245 ssh2


Failed password for admin from 185.220.101.34 port 49024 ssh2


Failed password for admin from 185.220.101.34 port 41102 ssh2


Failed password for admin from 185.220.101.34 port 46347 ssh2


Failed password for admin from 185.220.101.34 port 42716 ssh2


Failed password for admin from 185.220.101.34 port 58131 ssh2


Failed password for admin from 185.220.101.34 port 44605 ssh2


Failed password for admin from 185.220.101.34 port 52809 ssh2


Failed password for admin from 185.220.101.34 port 58247 ssh2


Failed password for admin from 185.220.101.34 port 49926 ssh2


Failed password for admin from 185.220.101.34 port 50582 ssh2


Failed password for admin from 185.220.101.34 port 49235 ssh2


Failed password for deploy from 74.189.141.241 port 44989 ssh2


Failed password for deploy from 74.189.141.241 port 44167 ssh2


Failed password for deploy from 74.189.141.241 port 54021 ssh2


Failed password for deploy from 74.189.141.241 port 52489 ssh2


Failed password for deploy from 74.189.141.241 port 55191 ssh2


Failed password for deploy from 74.189.141.241 port 52216 ssh2


Failed password for deploy from 74.189.141.241 port 49296 ssh2


Failed password for deploy from 74.189.141.241 port 41654 ssh2


Failed password for deploy from 74.189.141.241 port 57332 ssh2


Failed password for deploy from 74.189.141.241 port 53458 ssh2


Failed password for deploy from 74.189.141.241 port 52577 ssh2


Failed password for deploy from 74.189.141.241 port 42414 ssh2


Failed password for deploy from 74.189.141.241 port 46094 ssh2


Failed password for deploy from 74.189.141.241 port 50171 ssh2


Failed password for deploy from 74.189.141.241 port 55879 ssh2


Failed password for deploy from 74.189.141.241 port 46046 ssh2


Failed password for deploy from 74.189.141.241 port 45707 ssh2


Failed password for deploy from 74.189.141.241 port 53046 ssh2


Accepted password for deploy from 74.189.141.241 port 51234 ssh2


Failed password for deploy from 74.189.141.241 port 57184 ssh2


Failed password for deploy from 74.189.141.241 port 44220 ssh2


Accepted password for root from 10.0.2.214 port 49406 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


133.242.159.103 - - "GET /login HTTP/1.1" 200 6457


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 331


ALLOW IN=138.252.139.96 OUT= PROTO=TCP DPT=80


Accepted password for somchai from 10.0.1.58 port 44731 ssh2


209.211.26.52 - - "GET /login HTTP/1.1" 200 2966


198.66.108.221 - - "GET / HTTP/1.1" 200 6766


OUTBOUND src=10.0.4.208 dst=185.220.101.34 bytes=1946157056 proto=TCP dport=443 duration=472s


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/bash


28.159.154.38 - - "GET /dashboard HTTP/1.1" 200 4322


179.123.52.101 - - "GET / HTTP/1.1" 200 4700


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=222.253.60.58 OUT= PROTO=TCP DPT=53 FLAGS=SYN


89.128.118.31 - - "GET /api/orders?page=2 HTTP/1.1" 200 1777


Failed password for admin from 186.119.135.202 port 43760 ssh2


Failed password for admin from 186.119.135.202 port 47366 ssh2


Failed password for admin from 186.119.135.202 port 41954 ssh2


Failed password for admin from 186.119.135.202 port 50079 ssh2


Failed password for admin from 186.119.135.202 port 44882 ssh2


Failed password for admin from 186.119.135.202 port 44660 ssh2


Failed password for admin from 186.119.135.202 port 55358 ssh2


Failed password for admin from 186.119.135.202 port 54390 ssh2


Failed password for admin from 186.119.135.202 port 58651 ssh2


Failed password for admin from 186.119.135.202 port 56399 ssh2


ALLOW IN=79.2.168.249 OUT= PROTO=TCP DPT=80


Failed password for admin from 186.119.135.202 port 42635 ssh2


Failed password for admin from 186.119.135.202 port 49964 ssh2


Failed password for admin from 186.119.135.202 port 53189 ssh2


Failed password for admin from 186.119.135.202 port 56180 ssh2


Accepted password for guest from 10.0.4.215 port 44067 ssh2


ALLOW IN=193.132.156.182 OUT= PROTO=TCP DPT=80


ALLOW IN=108.58.100.220 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.4.4 port 45630 ssh2


Accepted password for deploy from 10.0.5.247 port 53163 ssh2


OUTBOUND src=10.0.5.56 dst=45.137.21.9 bytes=6035603456 proto=TCP dport=443 duration=81s


ALLOW IN=183.81.75.5 OUT= PROTO=TCP DPT=443


208.70.207.48 - - "GET /health HTTP/1.1" 200 7339


119.249.79.49 - - "GET /api/products HTTP/1.1" 200 1983


ALLOW IN=213.177.147.29 OUT= PROTO=TCP DPT=80


ALLOW IN=173.119.40.164 OUT= PROTO=TCP DPT=443


86.20.193.135 - - "GET /health HTTP/1.1" 200 2121


ALLOW IN=126.139.251.49 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.5.142 port 48259 ssh2


ALLOW IN=63.112.163.74 OUT= PROTO=TCP DPT=80


97.102.235.29 - - "GET /api/products HTTP/1.1" 200 3861


Accepted password for oppa from 10.0.3.176 port 58894 ssh2


116.180.180.213 - - "GET /static/app.js HTTP/1.1" 200 3688


123.191.239.11 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 192


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


OUTBOUND src=10.0.4.144 dst=185.220.101.34 bytes=7309623296 proto=TCP dport=443 duration=521s


ALLOW IN=202.222.158.233 OUT= PROTO=TCP DPT=443


164.243.83.234 - - "GET / HTTP/1.1" 200 3332


Accepted password for somchai from 10.0.4.92 port 41594 ssh2


73.116.90.217 - - "GET /static/app.js HTTP/1.1" 200 7487


Accepted password for nattapong from 10.0.1.13 port 46536 ssh2


39.75.63.90 - - "GET / HTTP/1.1" 200 1868


Accepted password for deploy from 10.0.0.93 port 45866 ssh2


Accepted password for admin from 10.0.5.233 port 40592 ssh2


ALLOW IN=193.11.20.64 OUT= PROTO=TCP DPT=443


ALLOW IN=169.124.234.11 OUT= PROTO=TCP DPT=80


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=57.221.156.58 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


101.25.100.11 - - "GET /static/app.js HTTP/1.1" 200 5436


ALLOW IN=31.170.16.34 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.3.74 port 40581 ssh2


13.81.183.129 - - "GET /health HTTP/1.1" 200 7253


Accepted password for oppa from 10.0.5.169 port 54740 ssh2


Accepted password for root from 10.0.2.24 port 51526 ssh2


Failed password for oppa from 45.137.21.9 port 53099 ssh2


Failed password for oppa from 45.137.21.9 port 44112 ssh2


Failed password for oppa from 45.137.21.9 port 44327 ssh2


Failed password for oppa from 45.137.21.9 port 55973 ssh2


Failed password for oppa from 45.137.21.9 port 43140 ssh2


Failed password for oppa from 45.137.21.9 port 51681 ssh2


Failed password for oppa from 45.137.21.9 port 49802 ssh2


Failed password for oppa from 45.137.21.9 port 57508 ssh2


Failed password for oppa from 45.137.21.9 port 42941 ssh2


Failed password for oppa from 45.137.21.9 port 59455 ssh2


Failed password for oppa from 45.137.21.9 port 41774 ssh2


Failed password for oppa from 45.137.21.9 port 44976 ssh2


Failed password for oppa from 45.137.21.9 port 52886 ssh2


Failed password for oppa from 45.137.21.9 port 48741 ssh2


Failed password for oppa from 45.137.21.9 port 42333 ssh2


Failed password for oppa from 45.137.21.9 port 41714 ssh2


Failed password for oppa from 45.137.21.9 port 52198 ssh2


Failed password for oppa from 45.137.21.9 port 45120 ssh2


ALLOW IN=62.93.65.215 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.3.63 port 45795 ssh2


Accepted password for somchai from 10.0.3.195 port 48957 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


187.4.6.173 - - "GET /login HTTP/1.1" 200 3308


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


170.167.145.95 - - "GET / HTTP/1.1" 200 6763


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 57


210.247.58.198 - - "GET / HTTP/1.1" 200 3140


Accepted password for guest from 10.0.4.82 port 50633 ssh2


ALLOW IN=96.236.211.238 OUT= PROTO=TCP DPT=80


Failed password for postgres from 209.141.56.12 port 51160 ssh2


Failed password for postgres from 209.141.56.12 port 51349 ssh2


Failed password for postgres from 209.141.56.12 port 44973 ssh2


Failed password for postgres from 209.141.56.12 port 57440 ssh2


Failed password for postgres from 209.141.56.12 port 56350 ssh2


Failed password for postgres from 209.141.56.12 port 53203 ssh2


Failed password for postgres from 209.141.56.12 port 45570 ssh2


Accepted password for postgres from 209.141.56.12 port 51234 ssh2


Failed password for postgres from 209.141.56.12 port 52781 ssh2


ALLOW IN=188.170.117.223 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.1.6 port 55101 ssh2


Accepted password for www-data from 10.0.0.233 port 51247 ssh2


54.132.152.49 - - "GET /api/orders?page=2 HTTP/1.1" 200 2704


ALLOW IN=140.251.32.217 OUT= PROTO=TCP DPT=80


ALLOW IN=57.192.223.25 OUT= PROTO=TCP DPT=80


Accepted password for oppa from 10.0.1.244 port 46701 ssh2


179.19.164.103 - - "GET /api/products HTTP/1.1" 200 3478


98.204.99.102 - - "GET / HTTP/1.1" 200 287


ALLOW IN=69.170.40.249 OUT= PROTO=TCP DPT=80


Failed password for postgres from 185.220.101.34 port 47306 ssh2


Failed password for postgres from 185.220.101.34 port 56281 ssh2


Failed password for postgres from 185.220.101.34 port 53652 ssh2


Failed password for postgres from 185.220.101.34 port 52399 ssh2


Failed password for postgres from 185.220.101.34 port 58093 ssh2


Failed password for postgres from 185.220.101.34 port 54511 ssh2


Failed password for postgres from 185.220.101.34 port 57244 ssh2


Failed password for postgres from 185.220.101.34 port 47146 ssh2


Failed password for postgres from 185.220.101.34 port 46334 ssh2


Failed password for postgres from 185.220.101.34 port 41276 ssh2


Failed password for postgres from 185.220.101.34 port 46898 ssh2


Failed password for postgres from 185.220.101.34 port 44869 ssh2


Failed password for postgres from 185.220.101.34 port 46467 ssh2


Failed password for postgres from 185.220.101.34 port 52711 ssh2


Failed password for postgres from 185.220.101.34 port 40836 ssh2


Failed password for postgres from 185.220.101.34 port 43206 ssh2


Failed password for postgres from 185.220.101.34 port 56641 ssh2


Failed password for postgres from 185.220.101.34 port 55268 ssh2


Failed password for postgres from 185.220.101.34 port 59132 ssh2


Failed password for postgres from 185.220.101.34 port 40085 ssh2


Failed password for postgres from 185.220.101.34 port 47140 ssh2


Failed password for postgres from 185.220.101.34 port 56418 ssh2


ALLOW IN=37.207.104.124 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=219 interval=300s


153.49.227.46 - - "GET /api/products HTTP/1.1" 200 3524


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=345 interval=300s


Accepted password for admin from 10.0.0.48 port 42831 ssh2


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=536 interval=300s


202.143.93.117 - - "GET /health HTTP/1.1" 200 643


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=733 interval=30s


ALLOW IN=73.49.198.33 OUT= PROTO=TCP DPT=443


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=774 interval=30s


ALLOW IN=68.79.253.135 OUT= PROTO=TCP DPT=80


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=319 interval=30s


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=502 interval=300s


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=807 interval=30s


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=339 interval=30s


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=684 interval=30s


Failed password for oppa from 106.59.149.179 port 40793 ssh2


Failed password for oppa from 106.59.149.179 port 47542 ssh2


Failed password for oppa from 106.59.149.179 port 43067 ssh2


Failed password for oppa from 106.59.149.179 port 57357 ssh2


Failed password for oppa from 106.59.149.179 port 46326 ssh2


Failed password for oppa from 106.59.149.179 port 54836 ssh2


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=706 interval=30s


Failed password for oppa from 106.59.149.179 port 45113 ssh2


Failed password for oppa from 106.59.149.179 port 44719 ssh2


Failed password for oppa from 106.59.149.179 port 41838 ssh2


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=766 interval=30s


CONN src=10.0.1.217 dst=45.137.21.9 dport=443 bytes=764 interval=30s


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=655 interval=300s


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=898 interval=300s


ALLOW IN=173.0.36.99 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=598 interval=300s


ALLOW IN=195.129.181.66 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=255 interval=300s


21.62.250.118 - - "GET /api/products HTTP/1.1" 200 610


165.160.15.16 - - "GET / HTTP/1.1" 200 4254


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=381 interval=300s


OUTBOUND src=10.0.2.44 dst=185.220.101.34 bytes=5728370688 proto=TCP dport=443 duration=177s


CONN src=10.0.3.26 dst=209.141.56.12 dport=443 bytes=372 interval=300s


70.114.73.221 - - "GET /static/app.js HTTP/1.1" 200 2313


159.165.132.19 - - "GET /api/orders?page=2 HTTP/1.1" 200 6680


48.34.156.190 - - "GET /api/orders?page=2 HTTP/1.1" 200 5617


Failed password for guest from 117.23.53.227 port 51625 ssh2


Failed password for guest from 117.23.53.227 port 41668 ssh2


Failed password for guest from 117.23.53.227 port 56624 ssh2


Failed password for guest from 117.23.53.227 port 43228 ssh2


Failed password for guest from 117.23.53.227 port 46751 ssh2


Failed password for guest from 117.23.53.227 port 51065 ssh2


Failed password for guest from 117.23.53.227 port 49335 ssh2


Failed password for guest from 117.23.53.227 port 40308 ssh2


Failed password for guest from 117.23.53.227 port 55484 ssh2


Failed password for guest from 117.23.53.227 port 55291 ssh2


Failed password for guest from 117.23.53.227 port 58288 ssh2


Failed password for guest from 117.23.53.227 port 50769 ssh2


Failed password for guest from 117.23.53.227 port 51164 ssh2


Failed password for guest from 117.23.53.227 port 43947 ssh2


Failed password for guest from 117.23.53.227 port 45427 ssh2


Failed password for guest from 117.23.53.227 port 44508 ssh2


Failed password for guest from 117.23.53.227 port 59619 ssh2


Failed password for guest from 117.23.53.227 port 43911 ssh2


Failed password for guest from 117.23.53.227 port 54537 ssh2


Failed password for guest from 117.23.53.227 port 40113 ssh2


ALLOW IN=118.40.172.232 OUT= PROTO=TCP DPT=443


ALLOW IN=124.209.59.118 OUT= PROTO=TCP DPT=80


40.253.20.114 - - "GET /api/products HTTP/1.1" 200 6008


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Failed password for admin from 209.141.56.12 port 55400 ssh2


Failed password for admin from 209.141.56.12 port 44252 ssh2


Failed password for admin from 209.141.56.12 port 59520 ssh2


Failed password for admin from 209.141.56.12 port 55765 ssh2


Failed password for admin from 209.141.56.12 port 41321 ssh2


Failed password for admin from 209.141.56.12 port 52589 ssh2


Failed password for admin from 209.141.56.12 port 43952 ssh2


Failed password for admin from 209.141.56.12 port 45965 ssh2


Failed password for admin from 209.141.56.12 port 57990 ssh2


Failed password for admin from 209.141.56.12 port 51103 ssh2


Failed password for admin from 209.141.56.12 port 40482 ssh2


Failed password for admin from 209.141.56.12 port 48417 ssh2


Failed password for admin from 209.141.56.12 port 46486 ssh2


Failed password for admin from 209.141.56.12 port 53737 ssh2


Failed password for admin from 209.141.56.12 port 44422 ssh2


Failed password for admin from 209.141.56.12 port 52951 ssh2


Failed password for admin from 209.141.56.12 port 45317 ssh2


Failed password for admin from 209.141.56.12 port 52802 ssh2


Failed password for admin from 209.141.56.12 port 57925 ssh2


Failed password for admin from 209.141.56.12 port 51530 ssh2


Failed password for admin from 209.141.56.12 port 43474 ssh2


Failed password for admin from 209.141.56.12 port 56400 ssh2


Failed password for admin from 209.141.56.12 port 49606 ssh2


Failed password for admin from 209.141.56.12 port 41246 ssh2


ALLOW IN=58.227.35.172 OUT= PROTO=TCP DPT=80


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=539 interval=30s


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=585 interval=30s


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=496 interval=30s


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=651 interval=30s


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=494 interval=30s


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=450 interval=30s


CONN src=10.0.4.198 dst=91.219.236.18 dport=443 bytes=654 interval=30s


ALLOW IN=13.251.244.77 OUT= PROTO=TCP DPT=80


54.78.52.84 - - "GET /api/products HTTP/1.1" 200 4836


Accepted password for postgres from 10.0.1.167 port 42119 ssh2


Failed password for root from 209.141.56.12 port 51635 ssh2


Failed password for root from 209.141.56.12 port 57230 ssh2


Failed password for root from 209.141.56.12 port 44121 ssh2


Failed password for root from 209.141.56.12 port 41989 ssh2


Failed password for root from 209.141.56.12 port 52834 ssh2


Failed password for root from 209.141.56.12 port 58212 ssh2


Failed password for root from 209.141.56.12 port 41539 ssh2


Failed password for root from 209.141.56.12 port 57320 ssh2


Failed password for root from 209.141.56.12 port 45074 ssh2


Failed password for root from 209.141.56.12 port 48475 ssh2


Failed password for root from 209.141.56.12 port 53109 ssh2


Failed password for root from 209.141.56.12 port 40162 ssh2


Failed password for root from 209.141.56.12 port 48159 ssh2


Failed password for root from 209.141.56.12 port 46150 ssh2


Failed password for root from 209.141.56.12 port 45814 ssh2


Failed password for root from 209.141.56.12 port 48775 ssh2


Failed password for root from 209.141.56.12 port 55520 ssh2


Failed password for root from 209.141.56.12 port 46352 ssh2


Failed password for root from 209.141.56.12 port 42102 ssh2


Accepted password for root from 10.0.4.207 port 46875 ssh2


Failed password for root from 209.141.56.12 port 49751 ssh2


Accepted password for root from 209.141.56.12 port 51234 ssh2


Accepted password for root from 10.0.1.200 port 55148 ssh2


Failed password for root from 209.141.56.12 port 42147 ssh2


Failed password for root from 209.141.56.12 port 49671 ssh2


Failed password for root from 209.141.56.12 port 45599 ssh2


Failed password for root from 209.141.56.12 port 58724 ssh2


Failed password for root from 209.141.56.12 port 50076 ssh2


Accepted password for somchai from 10.0.2.211 port 52503 ssh2


ALLOW IN=12.243.244.244 OUT= PROTO=TCP DPT=443


ALLOW IN=174.121.39.107 OUT= PROTO=TCP DPT=80


86.142.168.132 - - "GET /api/products HTTP/1.1" 200 7437


Accepted password for nattapong from 10.0.5.208 port 58318 ssh2


ALLOW IN=12.197.192.245 OUT= PROTO=TCP DPT=443


ALLOW IN=197.31.70.133 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.2.114 port 52999 ssh2


ALLOW IN=34.189.11.191 OUT= PROTO=TCP DPT=443


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/su -


Accepted password for postgres from 10.0.0.116 port 41528 ssh2


CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=496 interval=60s


102.156.150.168 - - "GET /api/orders?page=2 HTTP/1.1" 200 6873


CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=889 interval=60s


CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=559 interval=60s


CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=628 interval=60s


CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=549 interval=60s