DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


ALLOW IN=59.189.134.101 OUT= PROTO=TCP DPT=443


ALLOW IN=195.60.94.82 OUT= PROTO=TCP DPT=80


Accepted password for admin from 10.0.3.36 port 55225 ssh2


185.220.101.34 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 223


Accepted password for root from 10.0.1.39 port 41804 ssh2


64.93.132.96 - - "GET /health HTTP/1.1" 200 2194


24.198.32.53 - - "GET /static/app.js HTTP/1.1" 200 3588


ALLOW IN=134.197.62.3 OUT= PROTO=TCP DPT=80


101.48.183.224 - - "GET /static/app.js HTTP/1.1" 200 7923


ALLOW IN=65.104.190.204 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.4.220 port 59308 ssh2


Accepted password for oppa from 10.0.3.155 port 54224 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


208.62.165.39 - - "GET / HTTP/1.1" 200 7478


175.168.65.172 - - "GET /api/orders?page=2 HTTP/1.1" 200 6990


ALLOW IN=92.226.218.213 OUT= PROTO=TCP DPT=443


39.181.19.174 - - "GET /login HTTP/1.1" 200 5845


186.145.207.71 - - "GET / HTTP/1.1" 200 4370


ALLOW IN=36.244.117.212 OUT= PROTO=TCP DPT=443


112.3.191.176 - - "GET /dashboard HTTP/1.1" 200 602


ALLOW IN=206.171.201.90 OUT= PROTO=TCP DPT=443


136.227.85.229 - - "GET /static/app.js HTTP/1.1" 200 7847


Failed password for root from 209.141.56.12 port 47134 ssh2


Failed password for root from 209.141.56.12 port 51773 ssh2


Failed password for root from 209.141.56.12 port 47727 ssh2


Failed password for root from 209.141.56.12 port 57485 ssh2


Failed password for root from 209.141.56.12 port 45997 ssh2


Failed password for root from 209.141.56.12 port 48250 ssh2


Failed password for root from 209.141.56.12 port 47952 ssh2


Failed password for root from 209.141.56.12 port 40328 ssh2


Failed password for root from 209.141.56.12 port 50260 ssh2


Failed password for root from 209.141.56.12 port 48294 ssh2


Failed password for root from 209.141.56.12 port 48215 ssh2


Failed password for root from 209.141.56.12 port 47921 ssh2


Failed password for root from 209.141.56.12 port 40405 ssh2


Failed password for root from 209.141.56.12 port 45706 ssh2


Failed password for root from 209.141.56.12 port 55617 ssh2


Failed password for root from 209.141.56.12 port 44108 ssh2


Failed password for root from 209.141.56.12 port 41289 ssh2


Failed password for root from 209.141.56.12 port 53890 ssh2


ALLOW IN=62.110.225.220 OUT= PROTO=TCP DPT=443


39.144.15.61 - - "GET /dashboard HTTP/1.1" 200 5952


ALLOW IN=165.70.240.87 OUT= PROTO=TCP DPT=80


ALLOW IN=182.108.148.17 OUT= PROTO=TCP DPT=80


41.174.238.146 - - "GET /health HTTP/1.1" 200 5904


Accepted password for svc_backup from 10.0.1.197 port 45369 ssh2


133.65.100.173 - - "GET /login HTTP/1.1" 200 802


Failed password for postgres from 185.220.101.34 port 55316 ssh2


Failed password for postgres from 185.220.101.34 port 47953 ssh2


Failed password for postgres from 185.220.101.34 port 58627 ssh2


Failed password for postgres from 185.220.101.34 port 40133 ssh2


Failed password for postgres from 185.220.101.34 port 47772 ssh2


Failed password for postgres from 185.220.101.34 port 59247 ssh2


Failed password for postgres from 185.220.101.34 port 41416 ssh2


Failed password for postgres from 185.220.101.34 port 59083 ssh2


37.197.72.41 - - "GET /api/products HTTP/1.1" 200 4951


Failed password for postgres from 185.220.101.34 port 50244 ssh2


Failed password for postgres from 185.220.101.34 port 48278 ssh2


Failed password for postgres from 185.220.101.34 port 49080 ssh2


Failed password for postgres from 185.220.101.34 port 49738 ssh2


Failed password for postgres from 185.220.101.34 port 53205 ssh2


Accepted password for postgres from 185.220.101.34 port 51234 ssh2


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=66.128.153.63 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Failed password for postgres from 185.220.101.34 port 45582 ssh2


Failed password for postgres from 185.220.101.34 port 53960 ssh2


Accepted password for svc_backup from 10.0.1.206 port 53085 ssh2


211.101.39.186 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 340


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=625 interval=60s


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=653 interval=60s


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=495 interval=60s


ALLOW IN=189.208.65.196 OUT= PROTO=TCP DPT=443


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=367 interval=60s


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=634 interval=60s


110.121.147.178 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 213


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=624 interval=60s


209.141.56.12 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 309


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=342 interval=60s


167.113.32.163 - - "GET /health HTTP/1.1" 200 4003


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=801 interval=60s


ALLOW IN=167.206.113.176 OUT= PROTO=TCP DPT=80


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=812 interval=60s


CONN src=10.0.1.188 dst=45.137.21.9 dport=443 bytes=288 interval=60s


ALLOW IN=95.62.210.91 OUT= PROTO=TCP DPT=443


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/usr/bin/passwd root


217.119.114.67 - - "GET / HTTP/1.1" 200 2583


59.242.237.9 - - "GET / HTTP/1.1" 200 5860


16.148.120.94 - - "GET /dashboard HTTP/1.1" 200 6367


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/passwd root


OUTBOUND src=10.0.2.4 dst=45.137.21.9 bytes=3460300800 proto=TCP dport=443 duration=147s


Failed password for postgres from 91.219.236.18 port 43045 ssh2


Failed password for postgres from 91.219.236.18 port 53122 ssh2


Failed password for postgres from 91.219.236.18 port 46756 ssh2


Failed password for postgres from 91.219.236.18 port 55416 ssh2


Failed password for postgres from 91.219.236.18 port 54050 ssh2


Failed password for postgres from 91.219.236.18 port 42109 ssh2


Failed password for postgres from 91.219.236.18 port 55690 ssh2


Failed password for postgres from 91.219.236.18 port 45906 ssh2


Failed password for postgres from 91.219.236.18 port 40943 ssh2


Failed password for postgres from 91.219.236.18 port 44459 ssh2


Accepted password for admin from 10.0.4.170 port 50134 ssh2


Failed password for postgres from 91.219.236.18 port 44345 ssh2


Failed password for postgres from 91.219.236.18 port 47417 ssh2


Failed password for postgres from 91.219.236.18 port 49625 ssh2


Failed password for postgres from 91.219.236.18 port 45624 ssh2


Accepted password for svc_backup from 10.0.2.199 port 52924 ssh2


Accepted password for admin from 10.0.4.56 port 56576 ssh2


128.71.142.201 - - "GET /health HTTP/1.1" 200 5593


103.149.157.242 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 365


212.215.250.31 - - "GET /login HTTP/1.1" 200 2902


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


OUTBOUND src=10.0.2.110 dst=91.219.236.18 bytes=8194621440 proto=TCP dport=443 duration=375s


ALLOW IN=192.33.148.74 OUT= PROTO=TCP DPT=80


ALLOW IN=173.165.161.39 OUT= PROTO=TCP DPT=443


ALLOW IN=26.30.230.102 OUT= PROTO=TCP DPT=443


ALLOW IN=91.133.104.172 OUT= PROTO=TCP DPT=443


24.201.64.104 - - "GET /api/orders?page=2 HTTP/1.1" 200 248


ALLOW IN=118.230.13.98 OUT= PROTO=TCP DPT=80


Accepted password for admin from 10.0.1.153 port 59450 ssh2


ALLOW IN=185.89.33.151 OUT= PROTO=TCP DPT=80


ALLOW IN=48.247.183.11 OUT= PROTO=TCP DPT=80


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/passwd root


185.220.101.34 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 403 365


ALLOW IN=160.51.54.145 OUT= PROTO=TCP DPT=80


184.169.196.194 - - "GET /api/orders?page=2 HTTP/1.1" 200 1346


OUTBOUND src=10.0.2.254 dst=185.220.101.34 bytes=1254096896 proto=TCP dport=443 duration=438s


CONN src=10.0.1.222 dst=91.219.236.18 dport=443 bytes=618 interval=60s


CONN src=10.0.1.222 dst=91.219.236.18 dport=443 bytes=552 interval=60s


CONN src=10.0.1.222 dst=91.219.236.18 dport=443 bytes=674 interval=60s


CONN src=10.0.1.222 dst=91.219.236.18 dport=443 bytes=731 interval=60s


CONN src=10.0.1.222 dst=91.219.236.18 dport=443 bytes=831 interval=60s


CONN src=10.0.1.222 dst=91.219.236.18 dport=443 bytes=645 interval=60s


Failed password for deploy from 33.209.231.254 port 58045 ssh2


Failed password for deploy from 33.209.231.254 port 47158 ssh2


Failed password for deploy from 33.209.231.254 port 47231 ssh2


Failed password for deploy from 33.209.231.254 port 43436 ssh2


Failed password for deploy from 33.209.231.254 port 51465 ssh2


Failed password for deploy from 33.209.231.254 port 43635 ssh2


Failed password for deploy from 33.209.231.254 port 43520 ssh2


Accepted password for deploy from 33.209.231.254 port 51234 ssh2


Failed password for deploy from 33.209.231.254 port 40902 ssh2


Accepted password for root from 10.0.5.136 port 54259 ssh2


Accepted password for nattapong from 10.0.1.204 port 48519 ssh2


61.136.26.252 - - "GET /dashboard HTTP/1.1" 200 5345


94.196.170.220 - - "GET / HTTP/1.1" 200 1371


Accepted password for somchai from 10.0.0.109 port 55953 ssh2


53.95.160.48 - - "GET /static/app.js HTTP/1.1" 200 3595


130.116.233.249 - - "GET /health HTTP/1.1" 200 4879


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=159.217.79.227 OUT= PROTO=TCP DPT=53 FLAGS=SYN


Accepted password for www-data from 10.0.0.241 port 48490 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


ALLOW IN=175.211.160.254 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.2.238 port 55677 ssh2


64.0.33.42 - - "GET /health HTTP/1.1" 200 506


ALLOW IN=40.97.205.161 OUT= PROTO=TCP DPT=443


Accepted password for nattapong from 10.0.1.30 port 55254 ssh2


ALLOW IN=18.89.99.85 OUT= PROTO=TCP DPT=443


ALLOW IN=115.90.96.229 OUT= PROTO=TCP DPT=443


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=532 interval=30s


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=846 interval=30s


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=597 interval=30s


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=894 interval=30s


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=336 interval=30s


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=540 interval=30s


209.141.56.12 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 67


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=379 interval=30s


47.161.92.200 - - "GET / HTTP/1.1" 200 4194


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=850 interval=30s


CONN src=10.0.2.247 dst=193.27.228.114 dport=443 bytes=525 interval=30s


Accepted password for guest from 10.0.3.235 port 40639 ssh2


89.37.62.67 - - "GET /dashboard HTTP/1.1" 200 6826


105.13.175.83 - - "GET /api/orders?page=2 HTTP/1.1" 200 2166


38.61.202.211 - - "GET /login HTTP/1.1" 200 7984


ALLOW IN=88.222.176.254 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=875 interval=30s


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=371 interval=30s


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=385 interval=30s


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=319 interval=30s


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=410 interval=30s


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=406 interval=30s


CONN src=10.0.0.206 dst=91.219.236.18 dport=443 bytes=588 interval=30s


204.64.56.216 - - "GET /static/app.js HTTP/1.1" 200 620


Accepted password for svc_backup from 10.0.1.160 port 42956 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/passwd root


Accepted password for guest from 10.0.4.190 port 57178 ssh2


ALLOW IN=163.229.75.230 OUT= PROTO=TCP DPT=80


ALLOW IN=69.91.175.36 OUT= PROTO=TCP DPT=80


ALLOW IN=59.164.243.129 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.1.46 port 45143 ssh2


Accepted password for www-data from 10.0.3.88 port 46828 ssh2


Accepted password for admin from 10.0.0.4 port 40440 ssh2


OUTBOUND src=10.0.3.230 dst=193.27.228.114 bytes=694157312 proto=TCP dport=443 duration=563s


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Accepted password for svc_backup from 10.0.5.184 port 47286 ssh2


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=668 interval=300s


169.15.254.228 - - "GET /api/orders?page=2 HTTP/1.1" 200 4669


Accepted password for somchai from 10.0.4.118 port 59896 ssh2


ALLOW IN=56.233.184.239 OUT= PROTO=TCP DPT=80


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 446


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=203 interval=300s


200.11.252.202 - - "GET /api/orders?page=2 HTTP/1.1" 200 5021


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=281 interval=30s


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=900 interval=30s


69.139.136.206 - - "GET / HTTP/1.1" 200 695


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=555 interval=300s


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=896 interval=30s


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=535 interval=30s


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=391 interval=30s


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=745 interval=30s


CONN src=10.0.2.105 dst=45.137.21.9 dport=443 bytes=545 interval=30s


Failed password for postgres from 171.215.192.223 port 59813 ssh2


Failed password for postgres from 171.215.192.223 port 57111 ssh2


Failed password for postgres from 171.215.192.223 port 54948 ssh2


Failed password for postgres from 171.215.192.223 port 44757 ssh2


Failed password for postgres from 171.215.192.223 port 44814 ssh2


Failed password for postgres from 171.215.192.223 port 49647 ssh2


Failed password for postgres from 171.215.192.223 port 56398 ssh2


Failed password for postgres from 171.215.192.223 port 51999 ssh2


Failed password for postgres from 171.215.192.223 port 46238 ssh2


Failed password for postgres from 171.215.192.223 port 46060 ssh2


Failed password for postgres from 171.215.192.223 port 52586 ssh2


Failed password for postgres from 171.215.192.223 port 58525 ssh2


Failed password for postgres from 171.215.192.223 port 54086 ssh2


Failed password for postgres from 171.215.192.223 port 58637 ssh2


Failed password for postgres from 171.215.192.223 port 58660 ssh2


Failed password for postgres from 171.215.192.223 port 46371 ssh2


Accepted password for www-data from 10.0.2.234 port 59836 ssh2


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=425 interval=300s


ALLOW IN=133.140.48.204 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=275 interval=300s


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=290 interval=300s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=315 interval=60s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=690 interval=60s


CONN src=10.0.3.230 dst=185.220.101.34 dport=443 bytes=237 interval=300s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=241 interval=60s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=342 interval=60s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=894 interval=60s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=764 interval=60s


CONN src=10.0.4.188 dst=193.27.228.114 dport=443 bytes=319 interval=60s


ALLOW IN=151.214.62.217 OUT= PROTO=TCP DPT=80


136.93.143.102 - - "GET /login HTTP/1.1" 200 6345


Accepted password for somchai from 10.0.1.195 port 45575 ssh2


ALLOW IN=17.31.183.216 OUT= PROTO=TCP DPT=80


96.75.40.60 - - "GET /api/products HTTP/1.1" 200 5411


93.77.240.34 - - "GET / HTTP/1.1" 200 5045


115.135.8.135 - - "GET /health HTTP/1.1" 200 5737


ALLOW IN=213.14.18.29 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.3.104 port 47994 ssh2


ALLOW IN=20.78.35.172 OUT= PROTO=TCP DPT=80


213.200.113.222 - - "GET /login HTTP/1.1" 200 4674


Accepted password for postgres from 10.0.5.78 port 41224 ssh2


Failed password for www-data from 91.219.236.18 port 47429 ssh2


Failed password for www-data from 91.219.236.18 port 52533 ssh2


Failed password for www-data from 91.219.236.18 port 59736 ssh2


Failed password for www-data from 91.219.236.18 port 49987 ssh2


Failed password for www-data from 91.219.236.18 port 41655 ssh2


Failed password for www-data from 91.219.236.18 port 57692 ssh2


Failed password for www-data from 91.219.236.18 port 41349 ssh2


Failed password for www-data from 91.219.236.18 port 47277 ssh2


Failed password for www-data from 91.219.236.18 port 56462 ssh2


Failed password for www-data from 91.219.236.18 port 51015 ssh2


Failed password for www-data from 91.219.236.18 port 55592 ssh2


Failed password for www-data from 91.219.236.18 port 44901 ssh2


Failed password for www-data from 91.219.236.18 port 59501 ssh2


Failed password for www-data from 91.219.236.18 port 47235 ssh2


Failed password for www-data from 91.219.236.18 port 49495 ssh2


Failed password for www-data from 91.219.236.18 port 52873 ssh2


Failed password for www-data from 91.219.236.18 port 44850 ssh2


Failed password for www-data from 91.219.236.18 port 56538 ssh2


Failed password for www-data from 91.219.236.18 port 42787 ssh2


Failed password for www-data from 91.219.236.18 port 41615 ssh2