CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=672 interval=60s


CONN src=10.0.2.227 dst=91.219.236.18 dport=443 bytes=353 interval=60s


Accepted password for svc_backup from 10.0.2.32 port 50092 ssh2


ALLOW IN=34.92.96.98 OUT= PROTO=TCP DPT=80


ALLOW IN=176.53.19.95 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.3.96 port 53664 ssh2


ALLOW IN=11.250.126.121 OUT= PROTO=TCP DPT=80


ALLOW IN=15.157.115.203 OUT= PROTO=TCP DPT=443


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Accepted password for somchai from 10.0.0.194 port 56265 ssh2


Accepted password for somchai from 10.0.4.100 port 51805 ssh2


ALLOW IN=115.0.174.48 OUT= PROTO=TCP DPT=80


Failed password for postgres from 185.220.101.34 port 52890 ssh2


Failed password for postgres from 185.220.101.34 port 41885 ssh2


Failed password for postgres from 185.220.101.34 port 47659 ssh2


Failed password for postgres from 185.220.101.34 port 47710 ssh2


Failed password for postgres from 185.220.101.34 port 50964 ssh2


Failed password for postgres from 185.220.101.34 port 40197 ssh2


Failed password for postgres from 185.220.101.34 port 40832 ssh2


Failed password for postgres from 185.220.101.34 port 46554 ssh2


Failed password for postgres from 185.220.101.34 port 55521 ssh2


Failed password for postgres from 185.220.101.34 port 57197 ssh2


Failed password for postgres from 185.220.101.34 port 54297 ssh2


Failed password for postgres from 185.220.101.34 port 44744 ssh2


Failed password for postgres from 185.220.101.34 port 59535 ssh2


Failed password for postgres from 185.220.101.34 port 54059 ssh2


Failed password for postgres from 185.220.101.34 port 40289 ssh2


Failed password for postgres from 185.220.101.34 port 53700 ssh2


Failed password for postgres from 185.220.101.34 port 46286 ssh2


Failed password for postgres from 185.220.101.34 port 42746 ssh2


Failed password for postgres from 185.220.101.34 port 54753 ssh2


Accepted password for root from 10.0.2.213 port 58181 ssh2


Failed password for postgres from 185.220.101.34 port 56377 ssh2


Failed password for postgres from 185.220.101.34 port 48345 ssh2


Failed password for postgres from 185.220.101.34 port 50540 ssh2


Failed password for postgres from 185.220.101.34 port 59509 ssh2


Failed password for postgres from 185.220.101.34 port 51108 ssh2


45.137.21.9 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 168


ALLOW IN=102.153.87.216 OUT= PROTO=TCP DPT=80


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 65


OUTBOUND src=10.0.5.100 dst=45.137.21.9 bytes=3048210432 proto=TCP dport=443 duration=259s


ALLOW IN=176.197.144.176 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.0.87 port 57573 ssh2


55.7.57.23 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 11


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Accepted password for svc_backup from 10.0.3.194 port 50072 ssh2


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/bin/bash


ALLOW IN=89.122.87.81 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


209.141.56.12 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 131


99.168.81.237 - - "GET /static/app.js HTTP/1.1" 200 5934


Failed password for deploy from 209.141.56.12 port 45071 ssh2


Failed password for deploy from 209.141.56.12 port 56599 ssh2


Failed password for deploy from 209.141.56.12 port 58355 ssh2


Failed password for deploy from 209.141.56.12 port 44988 ssh2


Failed password for deploy from 209.141.56.12 port 57237 ssh2


Failed password for deploy from 209.141.56.12 port 50799 ssh2


Failed password for deploy from 209.141.56.12 port 48961 ssh2


Failed password for deploy from 209.141.56.12 port 55781 ssh2


Failed password for deploy from 209.141.56.12 port 52714 ssh2


Failed password for deploy from 209.141.56.12 port 47982 ssh2


Failed password for deploy from 209.141.56.12 port 45027 ssh2


Failed password for deploy from 209.141.56.12 port 42563 ssh2


Failed password for deploy from 209.141.56.12 port 54851 ssh2


Failed password for deploy from 209.141.56.12 port 43030 ssh2


Failed password for deploy from 209.141.56.12 port 41093 ssh2


Failed password for deploy from 209.141.56.12 port 46578 ssh2


Failed password for deploy from 209.141.56.12 port 52796 ssh2


Accepted password for www-data from 10.0.1.6 port 56643 ssh2


ALLOW IN=182.49.248.215 OUT= PROTO=TCP DPT=80


ALLOW IN=107.160.88.118 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.4.111 port 49125 ssh2


Failed password for guest from 185.220.101.34 port 55264 ssh2


Failed password for guest from 185.220.101.34 port 56952 ssh2


Failed password for guest from 185.220.101.34 port 44205 ssh2


Failed password for guest from 185.220.101.34 port 44228 ssh2


Failed password for guest from 185.220.101.34 port 44068 ssh2


Failed password for guest from 185.220.101.34 port 59260 ssh2


Failed password for guest from 185.220.101.34 port 50572 ssh2


Failed password for guest from 185.220.101.34 port 56477 ssh2


Failed password for guest from 185.220.101.34 port 45395 ssh2


Failed password for guest from 185.220.101.34 port 45014 ssh2


Failed password for svc_backup from 209.141.56.12 port 41575 ssh2


Failed password for svc_backup from 209.141.56.12 port 58156 ssh2


Failed password for svc_backup from 209.141.56.12 port 45531 ssh2


Failed password for svc_backup from 209.141.56.12 port 48674 ssh2


Failed password for svc_backup from 209.141.56.12 port 58267 ssh2


Failed password for svc_backup from 209.141.56.12 port 44191 ssh2


Failed password for svc_backup from 209.141.56.12 port 54065 ssh2


Failed password for svc_backup from 209.141.56.12 port 45728 ssh2


Failed password for svc_backup from 209.141.56.12 port 42513 ssh2


Failed password for svc_backup from 209.141.56.12 port 44585 ssh2


Failed password for svc_backup from 209.141.56.12 port 51862 ssh2


Failed password for svc_backup from 209.141.56.12 port 45051 ssh2


Failed password for svc_backup from 209.141.56.12 port 41544 ssh2


Failed password for svc_backup from 209.141.56.12 port 47620 ssh2


Failed password for svc_backup from 209.141.56.12 port 50626 ssh2


Failed password for svc_backup from 209.141.56.12 port 50010 ssh2


ALLOW IN=193.132.52.126 OUT= PROTO=TCP DPT=80


Failed password for svc_backup from 209.141.56.12 port 55309 ssh2


Failed password for svc_backup from 209.141.56.12 port 44772 ssh2


Failed password for svc_backup from 209.141.56.12 port 52039 ssh2


Accepted password for svc_backup from 209.141.56.12 port 51234 ssh2


Failed password for svc_backup from 209.141.56.12 port 54662 ssh2


64.82.210.6 - - "GET /login HTTP/1.1" 200 553


sudo: www-data : TTY=pts/0 ; PWD=/home/www-data ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


ALLOW IN=200.187.63.57 OUT= PROTO=TCP DPT=80


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/passwd root


Failed password for admin from 91.219.236.18 port 41217 ssh2


Failed password for admin from 91.219.236.18 port 54171 ssh2


Failed password for admin from 91.219.236.18 port 40434 ssh2


Failed password for admin from 91.219.236.18 port 53514 ssh2


Failed password for admin from 91.219.236.18 port 48758 ssh2


Failed password for admin from 91.219.236.18 port 48911 ssh2


Failed password for admin from 91.219.236.18 port 47694 ssh2


Failed password for admin from 91.219.236.18 port 41442 ssh2


Failed password for admin from 91.219.236.18 port 49226 ssh2


Failed password for admin from 91.219.236.18 port 41445 ssh2


Failed password for admin from 91.219.236.18 port 42064 ssh2


Failed password for admin from 91.219.236.18 port 41549 ssh2


Failed password for admin from 91.219.236.18 port 59596 ssh2


Failed password for admin from 91.219.236.18 port 55701 ssh2


Failed password for admin from 91.219.236.18 port 51928 ssh2


Failed password for admin from 91.219.236.18 port 54679 ssh2


Failed password for admin from 91.219.236.18 port 54950 ssh2


Failed password for admin from 91.219.236.18 port 57845 ssh2


Failed password for admin from 91.219.236.18 port 54265 ssh2


Accepted password for admin from 91.219.236.18 port 51234 ssh2


Failed password for admin from 91.219.236.18 port 56008 ssh2


Accepted password for deploy from 10.0.4.171 port 46825 ssh2


49.222.165.250 - - "GET /static/app.js HTTP/1.1" 200 7048


Accepted password for nattapong from 10.0.0.81 port 48123 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Accepted password for nattapong from 10.0.3.47 port 45358 ssh2


ALLOW IN=140.199.101.1 OUT= PROTO=TCP DPT=80


49.211.157.71 - - "GET /health HTTP/1.1" 200 445


155.18.222.98 - - "GET /static/app.js HTTP/1.1" 200 4419


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Accepted password for guest from 10.0.5.243 port 43923 ssh2


Accepted password for somchai from 10.0.3.203 port 45224 ssh2


ALLOW IN=116.170.70.206 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.2.65 port 46822 ssh2


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/bin/su -


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=659 interval=300s


Accepted password for postgres from 10.0.1.94 port 49998 ssh2


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=591 interval=300s


185.220.101.34 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 452


ALLOW IN=50.97.174.237 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.3.236 port 45426 ssh2


103.101.32.242 - - "GET /api/products HTTP/1.1" 200 6893


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=723 interval=300s


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=855 interval=300s


ALLOW IN=153.41.53.109 OUT= PROTO=TCP DPT=80


Accepted password for somchai from 10.0.3.143 port 58308 ssh2


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=281 interval=60s


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=207 interval=60s


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=616 interval=60s


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=438 interval=300s


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=386 interval=60s


Failed password for oppa from 209.141.56.12 port 59304 ssh2


Failed password for oppa from 209.141.56.12 port 47283 ssh2


Failed password for oppa from 209.141.56.12 port 57358 ssh2


Failed password for oppa from 209.141.56.12 port 47325 ssh2


Failed password for oppa from 209.141.56.12 port 56044 ssh2


Failed password for oppa from 209.141.56.12 port 52125 ssh2


Failed password for oppa from 209.141.56.12 port 51986 ssh2


Failed password for oppa from 209.141.56.12 port 43480 ssh2


Failed password for oppa from 209.141.56.12 port 52819 ssh2


Failed password for oppa from 209.141.56.12 port 58306 ssh2


Failed password for oppa from 209.141.56.12 port 40512 ssh2


Failed password for oppa from 209.141.56.12 port 48613 ssh2


Failed password for oppa from 209.141.56.12 port 50500 ssh2


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=881 interval=60s


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=749 interval=60s


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=433 interval=60s


CONN src=10.0.4.59 dst=91.219.236.18 dport=443 bytes=427 interval=60s


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=715 interval=300s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=801 interval=300s


Accepted password for guest from 10.0.3.53 port 42499 ssh2


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=213 interval=300s


21.100.55.9 - - "GET /health HTTP/1.1" 200 5604


CONN src=10.0.2.6 dst=45.137.21.9 dport=443 bytes=438 interval=300s


Accepted password for admin from 10.0.1.4 port 49674 ssh2


OUTBOUND src=10.0.1.210 dst=193.27.228.114 bytes=3822059520 proto=TCP dport=443 duration=577s


Failed password for somchai from 209.141.56.12 port 46986 ssh2


Failed password for somchai from 209.141.56.12 port 44861 ssh2


Failed password for somchai from 209.141.56.12 port 44940 ssh2


Failed password for somchai from 209.141.56.12 port 46229 ssh2


Failed password for somchai from 209.141.56.12 port 49415 ssh2


Failed password for somchai from 209.141.56.12 port 54506 ssh2


Failed password for somchai from 209.141.56.12 port 47426 ssh2


Failed password for somchai from 209.141.56.12 port 56622 ssh2


Failed password for somchai from 209.141.56.12 port 59771 ssh2


Failed password for somchai from 209.141.56.12 port 55521 ssh2


Failed password for somchai from 209.141.56.12 port 41604 ssh2


Failed password for somchai from 209.141.56.12 port 45711 ssh2


Failed password for somchai from 209.141.56.12 port 56759 ssh2


Failed password for somchai from 209.141.56.12 port 47389 ssh2


Failed password for somchai from 209.141.56.12 port 53986 ssh2


Failed password for somchai from 209.141.56.12 port 47276 ssh2


Failed password for somchai from 209.141.56.12 port 41138 ssh2


Failed password for somchai from 209.141.56.12 port 53012 ssh2


Accepted password for somchai from 209.141.56.12 port 51234 ssh2


Failed password for somchai from 209.141.56.12 port 55044 ssh2


98.83.52.56 - - "GET /login HTTP/1.1" 200 4323


206.73.107.252 - - "GET /static/app.js HTTP/1.1" 200 7010


185.24.23.26 - - "GET /api/orders?page=2 HTTP/1.1" 200 6621


Accepted password for admin from 10.0.0.148 port 52733 ssh2


OUTBOUND src=10.0.4.160 dst=193.27.228.114 bytes=4600102912 proto=TCP dport=443 duration=330s


133.50.253.123 - - "GET /dashboard HTTP/1.1" 200 7324


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


Accepted password for oppa from 10.0.1.202 port 59320 ssh2


Accepted password for www-data from 10.0.1.160 port 44996 ssh2


Accepted password for guest from 10.0.1.34 port 55574 ssh2


Failed password for nattapong from 209.141.56.12 port 58119 ssh2


Failed password for nattapong from 209.141.56.12 port 44022 ssh2


Failed password for nattapong from 209.141.56.12 port 47703 ssh2


Failed password for nattapong from 209.141.56.12 port 44651 ssh2


Failed password for nattapong from 209.141.56.12 port 40697 ssh2


Failed password for nattapong from 209.141.56.12 port 49145 ssh2


Failed password for nattapong from 209.141.56.12 port 54427 ssh2


Failed password for nattapong from 209.141.56.12 port 41106 ssh2


Failed password for nattapong from 209.141.56.12 port 54868 ssh2


Failed password for nattapong from 209.141.56.12 port 49108 ssh2


Failed password for nattapong from 209.141.56.12 port 42768 ssh2


Failed password for nattapong from 209.141.56.12 port 40617 ssh2


Failed password for nattapong from 209.141.56.12 port 52588 ssh2


Failed password for nattapong from 209.141.56.12 port 52604 ssh2


Failed password for nattapong from 209.141.56.12 port 52580 ssh2


CONN src=10.0.5.191 dst=193.27.228.114 dport=443 bytes=485 interval=60s


CONN src=10.0.5.191 dst=193.27.228.114 dport=443 bytes=665 interval=60s


CONN src=10.0.5.191 dst=193.27.228.114 dport=443 bytes=239 interval=60s


CONN src=10.0.5.191 dst=193.27.228.114 dport=443 bytes=758 interval=60s


CONN src=10.0.5.191 dst=193.27.228.114 dport=443 bytes=359 interval=60s


ALLOW IN=181.157.23.57 OUT= PROTO=TCP DPT=443


89.116.8.199 - - "GET /login HTTP/1.1" 200 7479


27.150.7.117 - - "GET / HTTP/1.1" 200 1980


ALLOW IN=95.171.63.79 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.0.2 port 41904 ssh2


Accepted password for root from 10.0.1.113 port 44822 ssh2


45.137.21.9 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 445


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=144.31.213.236 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for deploy from 10.0.2.141 port 43016 ssh2


139.50.209.104 - - "GET / HTTP/1.1" 200 1472


ALLOW IN=166.192.195.11 OUT= PROTO=TCP DPT=80


Failed password for somchai from 209.141.56.12 port 42081 ssh2


Failed password for somchai from 209.141.56.12 port 53668 ssh2


Failed password for somchai from 209.141.56.12 port 43831 ssh2


Failed password for somchai from 209.141.56.12 port 45286 ssh2


Failed password for somchai from 209.141.56.12 port 51362 ssh2


Failed password for somchai from 209.141.56.12 port 54294 ssh2


Failed password for somchai from 209.141.56.12 port 46298 ssh2


Failed password for somchai from 209.141.56.12 port 49613 ssh2


Failed password for somchai from 209.141.56.12 port 51267 ssh2


Failed password for somchai from 209.141.56.12 port 47605 ssh2


Failed password for somchai from 209.141.56.12 port 47199 ssh2


Failed password for somchai from 209.141.56.12 port 51804 ssh2


Failed password for somchai from 209.141.56.12 port 51113 ssh2


Failed password for somchai from 209.141.56.12 port 45309 ssh2


Failed password for somchai from 209.141.56.12 port 55350 ssh2


Failed password for somchai from 209.141.56.12 port 42824 ssh2


Failed password for somchai from 209.141.56.12 port 52791 ssh2


Failed password for somchai from 209.141.56.12 port 46789 ssh2


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


91.219.236.18 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 403 337


ALLOW IN=12.187.48.112 OUT= PROTO=TCP DPT=80


12.60.59.175 - - "GET /api/products HTTP/1.1" 200 2725


ALLOW IN=115.143.16.177 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.2.181 port 58748 ssh2


Accepted password for deploy from 10.0.4.125 port 51309 ssh2


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 30


40.186.14.9 - - "GET / HTTP/1.1" 200 814


Accepted password for postgres from 10.0.2.71 port 51316 ssh2


93.247.115.24 - - "GET /api/products HTTP/1.1" 200 6476


203.96.84.243 - - "GET /health HTTP/1.1" 200 3504


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 375


ALLOW IN=111.182.246.76 OUT= PROTO=TCP DPT=80


201.88.192.224 - - "GET /health HTTP/1.1" 200 2664


Failed password for postgres from 185.220.101.34 port 43731 ssh2


Failed password for postgres from 185.220.101.34 port 46547 ssh2


Failed password for postgres from 185.220.101.34 port 58025 ssh2


Failed password for postgres from 185.220.101.34 port 55126 ssh2


Failed password for postgres from 185.220.101.34 port 57879 ssh2


Failed password for postgres from 185.220.101.34 port 49923 ssh2


Failed password for postgres from 185.220.101.34 port 48279 ssh2


Failed password for postgres from 185.220.101.34 port 49546 ssh2


Failed password for postgres from 185.220.101.34 port 46869 ssh2


Failed password for postgres from 185.220.101.34 port 56361 ssh2


Failed password for postgres from 185.220.101.34 port 42266 ssh2


Failed password for postgres from 185.220.101.34 port 42423 ssh2


Failed password for postgres from 185.220.101.34 port 59593 ssh2


Failed password for postgres from 185.220.101.34 port 59078 ssh2


Failed password for postgres from 185.220.101.34 port 57510 ssh2


Failed password for postgres from 185.220.101.34 port 45050 ssh2


Failed password for postgres from 185.220.101.34 port 53865 ssh2


Failed password for postgres from 185.220.101.34 port 57593 ssh2


Failed password for postgres from 185.220.101.34 port 53706 ssh2


Failed password for postgres from 185.220.101.34 port 41204 ssh2


Accepted password for deploy from 10.0.2.220 port 45332 ssh2


ALLOW IN=169.43.230.113 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.5.164 port 54417 ssh2


ALLOW IN=186.224.119.195 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.1.157 port 59887 ssh2


Accepted password for oppa from 10.0.3.27 port 51607 ssh2


Accepted password for deploy from 10.0.2.106 port 50921 ssh2


37.120.3.125 - - "GET /api/orders?page=2 HTTP/1.1" 200 2782


161.109.207.111 - - "GET /health HTTP/1.1" 200 2126


11.25.145.3 - - "GET /static/app.js HTTP/1.1" 200 2213


135.187.107.93 - - "GET /health HTTP/1.1" 200 4779


ALLOW IN=56.168.247.132 OUT= PROTO=TCP DPT=443


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


ALLOW IN=47.31.221.114 OUT= PROTO=TCP DPT=443


ALLOW IN=191.107.3.51 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.5.79 port 48295 ssh2


Failed password for www-data from 91.219.236.18 port 50627 ssh2


Failed password for www-data from 91.219.236.18 port 48606 ssh2


Failed password for www-data from 91.219.236.18 port 44756 ssh2


Failed password for www-data from 91.219.236.18 port 47100 ssh2


Failed password for www-data from 91.219.236.18 port 45288 ssh2


Failed password for www-data from 91.219.236.18 port 43477 ssh2


Failed password for www-data from 91.219.236.18 port 45005 ssh2


Failed password for www-data from 91.219.236.18 port 46033 ssh2


Failed password for www-data from 91.219.236.18 port 51591 ssh2


Failed password for www-data from 91.219.236.18 port 52176 ssh2


Failed password for www-data from 91.219.236.18 port 56657 ssh2


Failed password for www-data from 91.219.236.18 port 45045 ssh2


Failed password for www-data from 91.219.236.18 port 58357 ssh2


Failed password for www-data from 91.219.236.18 port 42184 ssh2


Failed password for www-data from 91.219.236.18 port 49569 ssh2


Failed password for www-data from 91.219.236.18 port 41873 ssh2


Failed password for www-data from 91.219.236.18 port 45997 ssh2


Failed password for www-data from 91.219.236.18 port 58549 ssh2


Failed password for www-data from 91.219.236.18 port 47937 ssh2


Failed password for www-data from 91.219.236.18 port 51060 ssh2


Failed password for www-data from 91.219.236.18 port 41615 ssh2


Failed password for www-data from 91.219.236.18 port 55688 ssh2


Failed password for www-data from 91.219.236.18 port 43759 ssh2


Failed password for somchai from 45.137.21.9 port 48319 ssh2


Failed password for somchai from 45.137.21.9 port 56322 ssh2


Failed password for somchai from 45.137.21.9 port 54641 ssh2


Failed password for somchai from 45.137.21.9 port 43816 ssh2


Failed password for somchai from 45.137.21.9 port 58711 ssh2


Failed password for somchai from 45.137.21.9 port 54422 ssh2


Failed password for somchai from 45.137.21.9 port 45311 ssh2


Failed password for somchai from 45.137.21.9 port 50849 ssh2


Failed password for somchai from 45.137.21.9 port 40088 ssh2


Failed password for somchai from 45.137.21.9 port 59526 ssh2


Failed password for somchai from 45.137.21.9 port 59079 ssh2


Failed password for somchai from 45.137.21.9 port 56067 ssh2


Failed password for somchai from 45.137.21.9 port 58991 ssh2


Failed password for somchai from 45.137.21.9 port 44281 ssh2


Failed password for somchai from 45.137.21.9 port 57268 ssh2


Failed password for somchai from 45.137.21.9 port 43686 ssh2


Accepted password for somchai from 45.137.21.9 port 51234 ssh2


Failed password for somchai from 45.137.21.9 port 50711 ssh2


Failed password for somchai from 45.137.21.9 port 57004 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/su -


36.88.130.121 - - "GET /dashboard HTTP/1.1" 200 2449


Accepted password for nattapong from 10.0.1.31 port 43817 ssh2


OUTBOUND src=10.0.1.55 dst=185.220.101.34 bytes=5306843136 proto=TCP dport=443 duration=108s


ALLOW IN=25.154.189.131 OUT= PROTO=TCP DPT=443


ALLOW IN=167.17.109.191 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.146 dst=209.141.56.12 dport=443 bytes=506 interval=30s


Accepted password for deploy from 10.0.0.52 port 57841 ssh2


CONN src=10.0.4.146 dst=209.141.56.12 dport=443 bytes=387 interval=30s


CONN src=10.0.4.146 dst=209.141.56.12 dport=443 bytes=242 interval=30s


CONN src=10.0.4.146 dst=209.141.56.12 dport=443 bytes=372 interval=30s


Failed password for guest from 209.141.56.12 port 50905 ssh2


Failed password for guest from 209.141.56.12 port 55288 ssh2


Failed password for guest from 209.141.56.12 port 57668 ssh2


Failed password for guest from 209.141.56.12 port 51254 ssh2


Failed password for guest from 209.141.56.12 port 45383 ssh2


Failed password for guest from 209.141.56.12 port 52987 ssh2


Failed password for guest from 209.141.56.12 port 53729 ssh2


Failed password for guest from 209.141.56.12 port 56429 ssh2


Failed password for guest from 209.141.56.12 port 44753 ssh2


Failed password for guest from 209.141.56.12 port 51195 ssh2


CONN src=10.0.4.146 dst=209.141.56.12 dport=443 bytes=493 interval=30s


Failed password for guest from 209.141.56.12 port 45224 ssh2


190.221.215.15 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 375


Failed password for guest from 209.141.56.12 port 44571 ssh2


Failed password for guest from 209.141.56.12 port 58037 ssh2


Failed password for guest from 209.141.56.12 port 41375 ssh2


Failed password for guest from 209.141.56.12 port 43401 ssh2


Failed password for guest from 209.141.56.12 port 40132 ssh2


CONN src=10.0.4.146 dst=209.141.56.12 dport=443 bytes=773 interval=30s


ALLOW IN=178.240.146.138 OUT= PROTO=TCP DPT=80


203.211.11.44 - - "GET / HTTP/1.1" 200 4669


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=165.95.240.74 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Accepted password for admin from 10.0.2.173 port 59289 ssh2


91.103.39.254 - - "GET /health HTTP/1.1" 200 7396


ALLOW IN=68.145.16.101 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.4.201 port 44801 ssh2


Accepted password for admin from 10.0.1.250 port 54867 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


ALLOW IN=111.190.55.116 OUT= PROTO=TCP DPT=80


ALLOW IN=178.9.52.104 OUT= PROTO=TCP DPT=443


208.28.21.49 - - "GET / HTTP/1.1" 200 2715


217.92.119.182 - - "GET /api/products HTTP/1.1" 200 1785


140.133.175.208 - - "GET /health HTTP/1.1" 200 4628


Accepted password for oppa from 10.0.4.11 port 55366 ssh2


Failed password for svc_backup from 43.52.124.96 port 44280 ssh2


Failed password for svc_backup from 43.52.124.96 port 43065 ssh2


Failed password for svc_backup from 43.52.124.96 port 53341 ssh2


Failed password for svc_backup from 43.52.124.96 port 50992 ssh2


Failed password for svc_backup from 43.52.124.96 port 40094 ssh2


Failed password for svc_backup from 43.52.124.96 port 52971 ssh2


Failed password for svc_backup from 43.52.124.96 port 54416 ssh2


Failed password for svc_backup from 43.52.124.96 port 44326 ssh2


Failed password for svc_backup from 43.52.124.96 port 59492 ssh2


Failed password for svc_backup from 43.52.124.96 port 41882 ssh2


Failed password for svc_backup from 43.52.124.96 port 55060 ssh2


Failed password for svc_backup from 43.52.124.96 port 53037 ssh2


Failed password for svc_backup from 43.52.124.96 port 43144 ssh2


Failed password for svc_backup from 43.52.124.96 port 57605 ssh2


ALLOW IN=35.168.13.73 OUT= PROTO=TCP DPT=80


62.77.192.53 - - "GET /api/orders?page=2 HTTP/1.1" 200 510


ALLOW IN=200.43.105.98 OUT= PROTO=TCP DPT=80


151.245.31.23 - - "GET /api/products HTTP/1.1" 200 3337


Accepted password for svc_backup from 10.0.0.138 port 49240 ssh2


Failed password for guest from 185.220.101.34 port 49357 ssh2


Failed password for guest from 185.220.101.34 port 44018 ssh2


Failed password for guest from 185.220.101.34 port 56095 ssh2


Failed password for guest from 185.220.101.34 port 42426 ssh2


Failed password for guest from 185.220.101.34 port 50472 ssh2


Failed password for guest from 185.220.101.34 port 45657 ssh2


Failed password for guest from 185.220.101.34 port 45704 ssh2


Failed password for guest from 185.220.101.34 port 43976 ssh2


Failed password for guest from 185.220.101.34 port 44550 ssh2


Failed password for guest from 185.220.101.34 port 54585 ssh2


Failed password for guest from 185.220.101.34 port 56188 ssh2


Failed password for guest from 185.220.101.34 port 51825 ssh2


Failed password for guest from 185.220.101.34 port 49828 ssh2


Failed password for guest from 185.220.101.34 port 51384 ssh2


Failed password for guest from 185.220.101.34 port 50134 ssh2


Failed password for guest from 185.220.101.34 port 42127 ssh2


Failed password for guest from 185.220.101.34 port 56670 ssh2


Failed password for guest from 185.220.101.34 port 57765 ssh2


Failed password for guest from 185.220.101.34 port 55315 ssh2


Failed password for guest from 185.220.101.34 port 58752 ssh2


Failed password for guest from 185.220.101.34 port 44252 ssh2


Failed password for guest from 185.220.101.34 port 42825 ssh2


122.81.249.249 - - "GET /api/orders?page=2 HTTP/1.1" 200 689


ALLOW IN=163.36.6.253 OUT= PROTO=TCP DPT=443


ALLOW IN=67.216.229.231 OUT= PROTO=TCP DPT=443


ALLOW IN=204.101.53.54 OUT= PROTO=TCP DPT=443


193.27.228.114 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 180


Accepted password for postgres from 10.0.0.39 port 53035 ssh2


Accepted password for root from 10.0.1.79 port 54267 ssh2


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=684 interval=60s


42.185.196.207 - - "GET /api/products HTTP/1.1" 200 6382


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=592 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=751 interval=60s


Accepted password for nattapong from 10.0.4.201 port 51740 ssh2


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=300 interval=60s


CONN src=10.0.4.216 dst=45.137.21.9 dport=443 bytes=450 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=632 interval=60s


CONN src=10.0.4.216 dst=45.137.21.9 dport=443 bytes=673 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=801 interval=60s


CONN src=10.0.4.216 dst=45.137.21.9 dport=443 bytes=271 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=835 interval=60s


53.133.233.77 - - "GET /health HTTP/1.1" 200 2677


CONN src=10.0.4.216 dst=45.137.21.9 dport=443 bytes=207 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=559 interval=60s


CONN src=10.0.4.216 dst=45.137.21.9 dport=443 bytes=233 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=702 interval=60s


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 102


CONN src=10.0.4.216 dst=45.137.21.9 dport=443 bytes=898 interval=60s


CONN src=10.0.2.9 dst=185.220.101.34 dport=443 bytes=227 interval=60s


13.171.5.126 - - "GET /static/app.js HTTP/1.1" 200 741


31.66.28.161 - - "GET /dashboard HTTP/1.1" 200 2767


Accepted password for deploy from 10.0.2.178 port 50641 ssh2


Accepted password for somchai from 10.0.1.87 port 56547 ssh2


91.219.236.18 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 304


Accepted password for nattapong from 10.0.0.46 port 54529 ssh2


ALLOW IN=109.104.109.209 OUT= PROTO=TCP DPT=443


ALLOW IN=162.204.160.21 OUT= PROTO=TCP DPT=80


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/passwd root


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=84.141.219.134 OUT= PROTO=TCP DPT=25 FLAGS=SYN


ALLOW IN=104.242.35.52 OUT= PROTO=TCP DPT=80


197.169.223.101 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 461


171.225.57.251 - - "GET /health HTTP/1.1" 200 7947


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


ALLOW IN=144.200.206.94 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.2.232 port 53462 ssh2


199.98.87.250 - - "GET /health HTTP/1.1" 200 2826


Accepted password for oppa from 10.0.5.23 port 56358 ssh2


Accepted password for guest from 10.0.1.8 port 59240 ssh2


46.48.63.192 - - "GET /api/products HTTP/1.1" 200 1346


39.210.236.63 - - "GET /api/products HTTP/1.1" 200 7072


Accepted password for deploy from 10.0.0.137 port 41591 ssh2


185.175.133.251 - - "GET /health HTTP/1.1" 200 5997


79.109.33.110 - - "GET /api/orders?page=2 HTTP/1.1" 200 3406


Accepted password for admin from 10.0.2.97 port 53599 ssh2


142.34.217.89 - - "GET /login HTTP/1.1" 200 2484


Failed password for admin from 198.30.190.67 port 44057 ssh2


Failed password for admin from 198.30.190.67 port 44087 ssh2


Failed password for admin from 198.30.190.67 port 49763 ssh2


Failed password for admin from 198.30.190.67 port 59057 ssh2


Failed password for admin from 198.30.190.67 port 51107 ssh2


Failed password for admin from 198.30.190.67 port 40170 ssh2


Failed password for admin from 198.30.190.67 port 50742 ssh2


Failed password for admin from 198.30.190.67 port 51838 ssh2


Failed password for admin from 198.30.190.67 port 49804 ssh2


Failed password for admin from 198.30.190.67 port 53949 ssh2


Failed password for admin from 198.30.190.67 port 57474 ssh2


Failed password for admin from 198.30.190.67 port 58768 ssh2


Failed password for admin from 198.30.190.67 port 42037 ssh2


Failed password for admin from 198.30.190.67 port 47662 ssh2


Failed password for admin from 198.30.190.67 port 44586 ssh2


Failed password for admin from 198.30.190.67 port 43210 ssh2


Failed password for admin from 198.30.190.67 port 52375 ssh2


Failed password for admin from 198.30.190.67 port 48114 ssh2


Failed password for admin from 198.30.190.67 port 42685 ssh2


Failed password for admin from 198.30.190.67 port 44261 ssh2


Failed password for admin from 198.30.190.67 port 59083 ssh2


Failed password for admin from 198.30.190.67 port 47038 ssh2


Failed password for admin from 198.30.190.67 port 42558 ssh2


Failed password for admin from 198.30.190.67 port 57244 ssh2


Accepted password for www-data from 10.0.0.153 port 58606 ssh2


OUTBOUND src=10.0.1.49 dst=45.137.21.9 bytes=5911871488 proto=TCP dport=443 duration=259s


Accepted password for svc_backup from 10.0.5.125 port 59831 ssh2


Accepted password for somchai from 10.0.1.185 port 59948 ssh2


73.246.24.9 - - "GET /health HTTP/1.1" 200 3333


ALLOW IN=55.34.180.204 OUT= PROTO=TCP DPT=80


ALLOW IN=164.113.29.8 OUT= PROTO=TCP DPT=443


79.12.104.149 - - "GET / HTTP/1.1" 200 5187


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


171.18.252.71 - - "GET /login HTTP/1.1" 200 4882


ALLOW IN=147.250.153.122 OUT= PROTO=TCP DPT=80


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 250


221.1.144.186 - - "GET /api/products HTTP/1.1" 200 7060


Accepted password for oppa from 10.0.0.154 port 42226 ssh2


ALLOW IN=85.124.81.198 OUT= PROTO=TCP DPT=443


ALLOW IN=193.176.110.97 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=466 interval=300s


ALLOW IN=45.35.141.198 OUT= PROTO=TCP DPT=443


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=511 interval=300s


ALLOW IN=143.207.244.159 OUT= PROTO=TCP DPT=80


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=747 interval=300s


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=341 interval=300s


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 242


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=364 interval=300s


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=323 interval=300s


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=662 interval=300s


124.128.233.184 - - "GET / HTTP/1.1" 200 7289


CONN src=10.0.0.250 dst=45.137.21.9 dport=443 bytes=564 interval=300s


218.28.232.34 - - "GET /static/app.js HTTP/1.1" 200 3603


43.150.31.95 - - "GET /static/app.js HTTP/1.1" 200 635


209.228.40.98 - - "GET /static/app.js HTTP/1.1" 200 2547


197.195.177.109 - - "GET /api/orders?page=2 HTTP/1.1" 200 7665


41.235.249.117 - - "GET /api/products HTTP/1.1" 200 5984


Failed password for root from 190.104.73.144 port 47325 ssh2


Failed password for root from 190.104.73.144 port 45071 ssh2


Failed password for root from 190.104.73.144 port 50187 ssh2


Failed password for root from 190.104.73.144 port 42200 ssh2


Failed password for root from 190.104.73.144 port 45014 ssh2


Failed password for root from 190.104.73.144 port 46576 ssh2


Failed password for root from 190.104.73.144 port 40211 ssh2


Failed password for root from 190.104.73.144 port 46694 ssh2


Failed password for root from 190.104.73.144 port 55523 ssh2


Failed password for root from 190.104.73.144 port 56574 ssh2


Failed password for root from 190.104.73.144 port 43991 ssh2


Failed password for root from 190.104.73.144 port 57914 ssh2


Failed password for root from 190.104.73.144 port 43966 ssh2


Failed password for root from 190.104.73.144 port 44642 ssh2


Failed password for root from 190.104.73.144 port 43174 ssh2


Failed password for root from 190.104.73.144 port 52802 ssh2


Failed password for root from 190.104.73.144 port 53256 ssh2


Failed password for root from 190.104.73.144 port 46030 ssh2


Failed password for root from 190.104.73.144 port 54389 ssh2


Failed password for root from 190.104.73.144 port 44792 ssh2


Accepted password for root from 190.104.73.144 port 51234 ssh2


Failed password for root from 190.104.73.144 port 44036 ssh2


Failed password for root from 190.104.73.144 port 40709 ssh2


Failed password for root from 190.104.73.144 port 47886 ssh2


182.0.143.185 - - "GET /dashboard HTTP/1.1" 200 6205


Accepted password for oppa from 10.0.4.85 port 52803 ssh2


75.209.150.155 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 15


CONN src=10.0.1.198 dst=185.220.101.34 dport=443 bytes=325 interval=60s


CONN src=10.0.1.198 dst=185.220.101.34 dport=443 bytes=456 interval=60s


29.163.195.94 - - "GET /static/app.js HTTP/1.1" 200 3734


CONN src=10.0.1.198 dst=185.220.101.34 dport=443 bytes=701 interval=60s


Accepted password for svc_backup from 10.0.3.39 port 54012 ssh2


CONN src=10.0.1.198 dst=185.220.101.34 dport=443 bytes=709 interval=60s


CONN src=10.0.1.198 dst=185.220.101.34 dport=443 bytes=436 interval=60s


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


120.98.137.45 - - "GET /api/orders?page=2 HTTP/1.1" 200 646


84.202.1.115 - - "GET /static/app.js HTTP/1.1" 200 5193


103.185.30.78 - - "GET /static/app.js HTTP/1.1" 200 2550


ALLOW IN=30.230.27.208 OUT= PROTO=TCP DPT=443


91.219.236.18 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 387


130.50.240.195 - - "GET /health HTTP/1.1" 200 2823


185.220.101.34 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 331


Accepted password for root from 10.0.5.137 port 52254 ssh2


ALLOW IN=126.249.0.114 OUT= PROTO=TCP DPT=443


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=42.19.106.7 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for www-data from 10.0.0.235 port 55971 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/bash


Failed password for svc_backup from 91.219.236.18 port 43162 ssh2


Failed password for svc_backup from 91.219.236.18 port 51218 ssh2


Failed password for svc_backup from 91.219.236.18 port 51974 ssh2


Failed password for svc_backup from 91.219.236.18 port 48613 ssh2


Failed password for svc_backup from 91.219.236.18 port 47442 ssh2


Failed password for svc_backup from 91.219.236.18 port 40832 ssh2


Failed password for svc_backup from 91.219.236.18 port 58037 ssh2


Failed password for svc_backup from 91.219.236.18 port 51390 ssh2


Failed password for svc_backup from 91.219.236.18 port 56538 ssh2


Failed password for svc_backup from 91.219.236.18 port 43641 ssh2


Failed password for svc_backup from 91.219.236.18 port 53027 ssh2


Failed password for svc_backup from 91.219.236.18 port 44136 ssh2


Failed password for svc_backup from 91.219.236.18 port 47269 ssh2


Failed password for svc_backup from 91.219.236.18 port 46510 ssh2


Failed password for svc_backup from 91.219.236.18 port 58444 ssh2


Failed password for svc_backup from 91.219.236.18 port 54829 ssh2


Failed password for svc_backup from 91.219.236.18 port 57470 ssh2


Failed password for svc_backup from 91.219.236.18 port 58130 ssh2


Failed password for svc_backup from 91.219.236.18 port 57395 ssh2


Failed password for svc_backup from 91.219.236.18 port 49689 ssh2


Failed password for svc_backup from 91.219.236.18 port 46385 ssh2


Failed password for svc_backup from 91.219.236.18 port 57676 ssh2


Accepted password for svc_backup from 91.219.236.18 port 51234 ssh2


Failed password for svc_backup from 91.219.236.18 port 51597 ssh2


Failed password for svc_backup from 91.219.236.18 port 59691 ssh2


Failed password for svc_backup from 91.219.236.18 port 57204 ssh2


138.157.254.6 - - "GET / HTTP/1.1" 200 7943


ALLOW IN=208.251.244.112 OUT= PROTO=TCP DPT=443


Failed password for postgres from 91.219.236.18 port 48654 ssh2


Failed password for postgres from 91.219.236.18 port 54116 ssh2


Failed password for postgres from 91.219.236.18 port 47023 ssh2


Accepted password for postgres from 10.0.4.86 port 58602 ssh2


Failed password for postgres from 91.219.236.18 port 44573 ssh2


Failed password for postgres from 91.219.236.18 port 42917 ssh2


Failed password for postgres from 91.219.236.18 port 41670 ssh2


Failed password for postgres from 91.219.236.18 port 55097 ssh2


Failed password for postgres from 91.219.236.18 port 45620 ssh2


OUTBOUND src=10.0.3.230 dst=45.137.21.9 bytes=5830082560 proto=TCP dport=443 duration=559s


ALLOW IN=196.244.191.60 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.0.226 port 55240 ssh2


ALLOW IN=179.173.94.165 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.5.105 dst=45.137.21.9 bytes=4099932160 proto=TCP dport=443 duration=122s


Failed password for svc_backup from 185.220.101.34 port 44444 ssh2


Failed password for svc_backup from 185.220.101.34 port 45693 ssh2


Failed password for svc_backup from 185.220.101.34 port 58634 ssh2


Failed password for svc_backup from 185.220.101.34 port 46577 ssh2


Failed password for svc_backup from 185.220.101.34 port 48175 ssh2


Failed password for svc_backup from 185.220.101.34 port 54956 ssh2


Failed password for svc_backup from 185.220.101.34 port 51808 ssh2


Failed password for svc_backup from 185.220.101.34 port 52204 ssh2


Failed password for svc_backup from 185.220.101.34 port 52070 ssh2


Failed password for svc_backup from 185.220.101.34 port 56551 ssh2


Failed password for svc_backup from 185.220.101.34 port 44059 ssh2


Failed password for svc_backup from 185.220.101.34 port 46524 ssh2


Failed password for svc_backup from 185.220.101.34 port 58751 ssh2


Failed password for svc_backup from 185.220.101.34 port 47253 ssh2


Failed password for svc_backup from 185.220.101.34 port 59465 ssh2


Failed password for svc_backup from 185.220.101.34 port 45819 ssh2


Failed password for svc_backup from 185.220.101.34 port 59230 ssh2


Failed password for svc_backup from 185.220.101.34 port 41001 ssh2


Failed password for svc_backup from 185.220.101.34 port 45358 ssh2


Failed password for svc_backup from 185.220.101.34 port 42961 ssh2


Failed password for svc_backup from 185.220.101.34 port 40899 ssh2


Failed password for svc_backup from 185.220.101.34 port 41626 ssh2


Failed password for svc_backup from 185.220.101.34 port 51460 ssh2


Failed password for svc_backup from 185.220.101.34 port 47376 ssh2


169.234.189.113 - - "GET /login HTTP/1.1" 200 4796


Accepted password for oppa from 10.0.5.69 port 54831 ssh2


OUTBOUND src=10.0.4.29 dst=45.137.21.9 bytes=6134169600 proto=TCP dport=443 duration=75s


114.211.169.98 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 396


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=417 interval=300s


Accepted password for deploy from 10.0.0.90 port 43322 ssh2


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=371 interval=300s


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=349 interval=300s


162.236.243.145 - - "GET /api/orders?page=2 HTTP/1.1" 200 4044


Accepted password for somchai from 10.0.0.179 port 52199 ssh2


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=324 interval=300s


ALLOW IN=205.78.110.222 OUT= PROTO=TCP DPT=443


24.43.28.70 - - "GET /health HTTP/1.1" 200 5523


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=245 interval=300s


Accepted password for admin from 10.0.3.51 port 59775 ssh2


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=319 interval=300s


ALLOW IN=176.22.80.158 OUT= PROTO=TCP DPT=80


Failed password for svc_backup from 160.7.68.248 port 59947 ssh2


Failed password for svc_backup from 160.7.68.248 port 52716 ssh2


Failed password for svc_backup from 160.7.68.248 port 43963 ssh2


Failed password for svc_backup from 160.7.68.248 port 57699 ssh2


Failed password for svc_backup from 160.7.68.248 port 52679 ssh2


Failed password for svc_backup from 160.7.68.248 port 46214 ssh2


Failed password for svc_backup from 160.7.68.248 port 54266 ssh2


Failed password for svc_backup from 160.7.68.248 port 52970 ssh2


Failed password for svc_backup from 160.7.68.248 port 59554 ssh2


Failed password for svc_backup from 160.7.68.248 port 56306 ssh2


Failed password for svc_backup from 160.7.68.248 port 53107 ssh2


Failed password for svc_backup from 160.7.68.248 port 45181 ssh2


Failed password for svc_backup from 160.7.68.248 port 51925 ssh2


Failed password for svc_backup from 160.7.68.248 port 44177 ssh2


Failed password for svc_backup from 160.7.68.248 port 41506 ssh2


Failed password for svc_backup from 160.7.68.248 port 52401 ssh2


Failed password for svc_backup from 160.7.68.248 port 59480 ssh2


Failed password for svc_backup from 160.7.68.248 port 53535 ssh2


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=215 interval=300s


Failed password for svc_backup from 160.7.68.248 port 56091 ssh2


Failed password for svc_backup from 160.7.68.248 port 49678 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


31.128.100.163 - - "GET /static/app.js HTTP/1.1" 200 2448


180.208.175.96 - - "GET /login HTTP/1.1" 200 2074


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=389 interval=300s


CONN src=10.0.0.184 dst=209.141.56.12 dport=443 bytes=435 interval=300s


Accepted password for somchai from 10.0.3.146 port 52354 ssh2


109.36.213.246 - - "GET /api/products HTTP/1.1" 200 7436


ALLOW IN=205.125.172.170 OUT= PROTO=TCP DPT=443


Failed password for postgres from 45.137.21.9 port 57981 ssh2


Failed password for postgres from 45.137.21.9 port 45506 ssh2


Failed password for postgres from 45.137.21.9 port 43790 ssh2


Failed password for postgres from 45.137.21.9 port 47974 ssh2


Failed password for postgres from 45.137.21.9 port 45584 ssh2


Failed password for postgres from 45.137.21.9 port 57716 ssh2


Failed password for postgres from 45.137.21.9 port 54250 ssh2


Failed password for postgres from 45.137.21.9 port 50698 ssh2


Failed password for postgres from 45.137.21.9 port 48441 ssh2


Failed password for postgres from 45.137.21.9 port 50905 ssh2


Failed password for postgres from 45.137.21.9 port 42930 ssh2


Failed password for postgres from 45.137.21.9 port 49186 ssh2


Failed password for postgres from 45.137.21.9 port 40957 ssh2


Failed password for postgres from 45.137.21.9 port 55607 ssh2


Failed password for postgres from 45.137.21.9 port 44033 ssh2


Failed password for postgres from 45.137.21.9 port 44448 ssh2


Failed password for postgres from 45.137.21.9 port 56120 ssh2


Accepted password for guest from 10.0.0.216 port 49329 ssh2


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 420


ALLOW IN=153.168.231.41 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.1.94 port 51470 ssh2


ALLOW IN=145.172.222.228 OUT= PROTO=TCP DPT=80


ALLOW IN=160.190.52.165 OUT= PROTO=TCP DPT=443


145.52.241.60 - - "GET /api/orders?page=2 HTTP/1.1" 200 3790


ALLOW IN=75.244.145.149 OUT= PROTO=TCP DPT=443


183.52.106.233 - - "GET /login HTTP/1.1" 200 4281


ALLOW IN=67.110.110.96 OUT= PROTO=TCP DPT=80


ALLOW IN=199.172.23.167 OUT= PROTO=TCP DPT=443


Failed password for nattapong from 91.219.236.18 port 43537 ssh2


Failed password for nattapong from 91.219.236.18 port 54534 ssh2


Failed password for nattapong from 91.219.236.18 port 42647 ssh2


Failed password for nattapong from 91.219.236.18 port 42152 ssh2


Failed password for nattapong from 91.219.236.18 port 49011 ssh2


Failed password for nattapong from 91.219.236.18 port 59932 ssh2


Failed password for nattapong from 91.219.236.18 port 43749 ssh2


Failed password for nattapong from 91.219.236.18 port 59575 ssh2


Failed password for nattapong from 91.219.236.18 port 53559 ssh2


Failed password for nattapong from 91.219.236.18 port 59181 ssh2


Failed password for nattapong from 91.219.236.18 port 56565 ssh2


Failed password for nattapong from 91.219.236.18 port 50655 ssh2


Failed password for nattapong from 91.219.236.18 port 49663 ssh2


Failed password for nattapong from 91.219.236.18 port 54796 ssh2


Failed password for nattapong from 91.219.236.18 port 54096 ssh2


Failed password for nattapong from 91.219.236.18 port 54860 ssh2


Failed password for nattapong from 91.219.236.18 port 53631 ssh2


Failed password for nattapong from 91.219.236.18 port 58066 ssh2


Failed password for nattapong from 91.219.236.18 port 53984 ssh2


Failed password for nattapong from 91.219.236.18 port 47045 ssh2


Failed password for nattapong from 91.219.236.18 port 43115 ssh2


66.242.236.72 - - "GET / HTTP/1.1" 200 6180


Accepted password for www-data from 10.0.4.190 port 45968 ssh2


193.27.228.114 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 326


ALLOW IN=215.193.80.38 OUT= PROTO=TCP DPT=443


ALLOW IN=147.99.245.254 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.0.9 port 42940 ssh2


ALLOW IN=178.52.140.132 OUT= PROTO=TCP DPT=80


166.107.50.170 - - "GET /health HTTP/1.1" 200 566


Failed password for oppa from 91.219.236.18 port 41292 ssh2


Failed password for oppa from 91.219.236.18 port 59353 ssh2


Failed password for oppa from 91.219.236.18 port 54088 ssh2


Failed password for oppa from 91.219.236.18 port 48798 ssh2


Failed password for oppa from 91.219.236.18 port 44157 ssh2


Failed password for oppa from 91.219.236.18 port 50842 ssh2


Failed password for oppa from 91.219.236.18 port 59830 ssh2


Failed password for oppa from 91.219.236.18 port 59954 ssh2


Failed password for oppa from 91.219.236.18 port 49463 ssh2


Failed password for oppa from 91.219.236.18 port 40529 ssh2


Failed password for oppa from 91.219.236.18 port 59602 ssh2


Failed password for oppa from 91.219.236.18 port 47530 ssh2


Failed password for oppa from 91.219.236.18 port 59844 ssh2


Failed password for oppa from 91.219.236.18 port 57769 ssh2


Failed password for oppa from 91.219.236.18 port 59979 ssh2


185.220.101.34 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 395


Failed password for oppa from 91.219.236.18 port 48217 ssh2


Failed password for oppa from 91.219.236.18 port 49563 ssh2


Failed password for oppa from 91.219.236.18 port 51363 ssh2


Failed password for oppa from 91.219.236.18 port 44259 ssh2


Failed password for oppa from 91.219.236.18 port 58138 ssh2


Failed password for oppa from 91.219.236.18 port 42163 ssh2


Failed password for oppa from 91.219.236.18 port 42752 ssh2


Accepted password for root from 10.0.4.128 port 42152 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


66.37.84.110 - - "GET /dashboard HTTP/1.1" 200 7517


Accepted password for oppa from 10.0.0.95 port 44368 ssh2


Failed password for nattapong from 45.137.21.9 port 44348 ssh2


Failed password for nattapong from 45.137.21.9 port 41197 ssh2


Failed password for nattapong from 45.137.21.9 port 52700 ssh2


Failed password for nattapong from 45.137.21.9 port 40134 ssh2


Failed password for nattapong from 45.137.21.9 port 50921 ssh2


Failed password for nattapong from 45.137.21.9 port 57116 ssh2


Failed password for nattapong from 45.137.21.9 port 57058 ssh2


Failed password for nattapong from 45.137.21.9 port 41442 ssh2


Failed password for nattapong from 45.137.21.9 port 58925 ssh2


Failed password for nattapong from 45.137.21.9 port 49390 ssh2


Failed password for nattapong from 45.137.21.9 port 41511 ssh2


Failed password for nattapong from 45.137.21.9 port 59473 ssh2


Failed password for nattapong from 45.137.21.9 port 48966 ssh2


Failed password for nattapong from 45.137.21.9 port 40499 ssh2


Failed password for nattapong from 45.137.21.9 port 57777 ssh2


Failed password for nattapong from 45.137.21.9 port 46876 ssh2


Failed password for nattapong from 45.137.21.9 port 46571 ssh2


Failed password for nattapong from 45.137.21.9 port 50239 ssh2


Failed password for nattapong from 45.137.21.9 port 57441 ssh2


Failed password for nattapong from 45.137.21.9 port 54454 ssh2


Failed password for nattapong from 45.137.21.9 port 44892 ssh2


Failed password for nattapong from 45.137.21.9 port 43855 ssh2


Failed password for nattapong from 45.137.21.9 port 58337 ssh2


Failed password for nattapong from 45.137.21.9 port 43354 ssh2


93.10.255.130 - - "GET /static/app.js HTTP/1.1" 200 3377


73.160.167.199 - - "GET /api/orders?page=2 HTTP/1.1" 200 3376


ALLOW IN=123.162.137.50 OUT= PROTO=TCP DPT=443


ALLOW IN=83.51.99.76 OUT= PROTO=TCP DPT=80


133.146.23.43 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 194


Failed password for somchai from 32.87.225.59 port 49522 ssh2


Failed password for somchai from 32.87.225.59 port 46025 ssh2


Failed password for somchai from 32.87.225.59 port 51433 ssh2


Failed password for somchai from 32.87.225.59 port 55464 ssh2


Failed password for somchai from 32.87.225.59 port 40215 ssh2


Failed password for somchai from 32.87.225.59 port 54719 ssh2


Failed password for somchai from 32.87.225.59 port 58035 ssh2


Failed password for somchai from 32.87.225.59 port 52961 ssh2


Failed password for somchai from 32.87.225.59 port 44513 ssh2


Failed password for somchai from 32.87.225.59 port 50722 ssh2


Failed password for somchai from 32.87.225.59 port 40638 ssh2


Failed password for somchai from 32.87.225.59 port 51908 ssh2


Failed password for somchai from 32.87.225.59 port 42272 ssh2


Failed password for somchai from 32.87.225.59 port 41060 ssh2


Failed password for somchai from 32.87.225.59 port 45248 ssh2


Failed password for somchai from 32.87.225.59 port 54086 ssh2


Failed password for somchai from 32.87.225.59 port 55399 ssh2


Failed password for somchai from 32.87.225.59 port 42169 ssh2


Failed password for somchai from 32.87.225.59 port 50879 ssh2


Accepted password for svc_backup from 10.0.0.149 port 50703 ssh2


Failed password for somchai from 32.87.225.59 port 43762 ssh2


Failed password for somchai from 32.87.225.59 port 49947 ssh2


ALLOW IN=39.33.215.250 OUT= PROTO=TCP DPT=443


176.181.207.193 - - "GET /api/products HTTP/1.1" 200 4488


11.117.126.156 - - "GET / HTTP/1.1" 200 6000


Accepted password for postgres from 10.0.0.206 port 55835 ssh2


CONN src=10.0.3.144 dst=193.27.228.114 dport=443 bytes=670 interval=60s


CONN src=10.0.3.144 dst=193.27.228.114 dport=443 bytes=682 interval=60s


CONN src=10.0.3.144 dst=193.27.228.114 dport=443 bytes=708 interval=60s


CONN src=10.0.3.144 dst=193.27.228.114 dport=443 bytes=461 interval=60s


CONN src=10.0.3.144 dst=193.27.228.114 dport=443 bytes=206 interval=60s


CONN src=10.0.3.144 dst=193.27.228.114 dport=443 bytes=218 interval=60s


ALLOW IN=190.131.25.94 OUT= PROTO=TCP DPT=80


ALLOW IN=140.10.199.224 OUT= PROTO=TCP DPT=443


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/bash


OUTBOUND src=10.0.5.173 dst=45.137.21.9 bytes=4160749568 proto=TCP dport=443 duration=580s


Failed password for postgres from 185.220.101.34 port 40562 ssh2


Failed password for postgres from 185.220.101.34 port 58296 ssh2


Failed password for postgres from 185.220.101.34 port 41952 ssh2


Failed password for postgres from 185.220.101.34 port 44377 ssh2


Failed password for postgres from 185.220.101.34 port 49656 ssh2


Failed password for postgres from 185.220.101.34 port 51824 ssh2


Failed password for postgres from 185.220.101.34 port 44723 ssh2


Accepted password for postgres from 185.220.101.34 port 51234 ssh2


Failed password for postgres from 185.220.101.34 port 53797 ssh2


Accepted password for admin from 10.0.4.73 port 59919 ssh2


Accepted password for svc_backup from 10.0.0.249 port 44753 ssh2


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/bash


182.11.174.105 - - "GET /api/products HTTP/1.1" 200 5339


210.99.175.77 - - "GET /login HTTP/1.1" 200 4106


ALLOW IN=166.21.229.247 OUT= PROTO=TCP DPT=80


Failed password for postgres from 209.141.56.12 port 43485 ssh2


Failed password for postgres from 209.141.56.12 port 59720 ssh2


Failed password for postgres from 209.141.56.12 port 41344 ssh2


Failed password for postgres from 209.141.56.12 port 54606 ssh2


Failed password for postgres from 209.141.56.12 port 42453 ssh2


Failed password for postgres from 209.141.56.12 port 57483 ssh2


Failed password for postgres from 209.141.56.12 port 46240 ssh2


Failed password for postgres from 209.141.56.12 port 44188 ssh2


Failed password for postgres from 209.141.56.12 port 53703 ssh2


Failed password for postgres from 209.141.56.12 port 55538 ssh2


Failed password for postgres from 209.141.56.12 port 51236 ssh2


Failed password for postgres from 209.141.56.12 port 45470 ssh2


Failed password for postgres from 209.141.56.12 port 45035 ssh2


Failed password for postgres from 209.141.56.12 port 54695 ssh2


Failed password for postgres from 209.141.56.12 port 42218 ssh2


Failed password for postgres from 209.141.56.12 port 53729 ssh2


Failed password for postgres from 209.141.56.12 port 48274 ssh2


Failed password for postgres from 209.141.56.12 port 51381 ssh2


Failed password for postgres from 209.141.56.12 port 43847 ssh2


Failed password for postgres from 209.141.56.12 port 56510 ssh2


Accepted password for deploy from 10.0.3.174 port 46762 ssh2


Accepted password for admin from 10.0.5.107 port 51077 ssh2


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/passwd root


ALLOW IN=81.146.8.129 OUT= PROTO=TCP DPT=443


112.160.142.64 - - "GET / HTTP/1.1" 200 412


OUTBOUND src=10.0.1.200 dst=209.141.56.12 bytes=7046430720 proto=TCP dport=443 duration=136s


Accepted password for admin from 10.0.5.2 port 40454 ssh2


CONN src=10.0.1.226 dst=209.141.56.12 dport=443 bytes=620 interval=30s


CONN src=10.0.1.226 dst=209.141.56.12 dport=443 bytes=418 interval=30s


CONN src=10.0.1.226 dst=209.141.56.12 dport=443 bytes=283 interval=30s


CONN src=10.0.1.226 dst=209.141.56.12 dport=443 bytes=738 interval=30s


CONN src=10.0.1.226 dst=209.141.56.12 dport=443 bytes=607 interval=30s


ALLOW IN=57.153.118.225 OUT= PROTO=TCP DPT=443


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=484 interval=300s


Failed password for root from 193.27.228.114 port 42057 ssh2


Failed password for root from 193.27.228.114 port 51279 ssh2


Failed password for root from 193.27.228.114 port 54612 ssh2


Failed password for root from 193.27.228.114 port 42891 ssh2


Failed password for root from 193.27.228.114 port 41979 ssh2


Failed password for root from 193.27.228.114 port 54093 ssh2


Failed password for root from 193.27.228.114 port 59272 ssh2


Failed password for root from 193.27.228.114 port 59841 ssh2


Failed password for root from 193.27.228.114 port 42158 ssh2


Failed password for root from 193.27.228.114 port 48599 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/su -


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=874 interval=300s


52.212.17.8 - - "GET / HTTP/1.1" 200 5369


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


OUTBOUND src=10.0.1.99 dst=91.219.236.18 bytes=7030702080 proto=TCP dport=443 duration=471s


Accepted password for root from 10.0.3.95 port 41572 ssh2


Accepted password for nattapong from 10.0.5.16 port 51711 ssh2


185.220.101.34 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 332


ALLOW IN=88.254.153.45 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=451 interval=300s


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=255 interval=300s


ALLOW IN=203.117.246.171 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=350 interval=300s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


Failed password for postgres from 91.219.236.18 port 58052 ssh2


Failed password for postgres from 91.219.236.18 port 46071 ssh2


Failed password for postgres from 91.219.236.18 port 58204 ssh2


Failed password for postgres from 91.219.236.18 port 52495 ssh2


Failed password for postgres from 91.219.236.18 port 43388 ssh2


Failed password for postgres from 91.219.236.18 port 45546 ssh2


Failed password for postgres from 91.219.236.18 port 58892 ssh2


Failed password for postgres from 91.219.236.18 port 57998 ssh2


Failed password for postgres from 91.219.236.18 port 46281 ssh2


Failed password for postgres from 91.219.236.18 port 45452 ssh2


Failed password for postgres from 91.219.236.18 port 41301 ssh2


Failed password for postgres from 91.219.236.18 port 45919 ssh2


Failed password for postgres from 91.219.236.18 port 53974 ssh2


Failed password for postgres from 91.219.236.18 port 40699 ssh2


Failed password for postgres from 91.219.236.18 port 47610 ssh2


74.72.183.186 - - "GET /static/app.js HTTP/1.1" 200 929


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=894 interval=300s


116.96.35.47 - - "GET /login HTTP/1.1" 200 2572


Accepted password for svc_backup from 10.0.0.238 port 42373 ssh2


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=277 interval=300s


ALLOW IN=42.207.7.158 OUT= PROTO=TCP DPT=80


ALLOW IN=30.84.224.193 OUT= PROTO=TCP DPT=443


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=677 interval=300s


Accepted password for deploy from 10.0.3.134 port 42853 ssh2


CONN src=10.0.2.61 dst=193.27.228.114 dport=443 bytes=751 interval=300s


91.70.138.16 - - "GET /login HTTP/1.1" 200 1561


Accepted password for postgres from 10.0.2.31 port 52836 ssh2


Failed password for admin from 154.245.202.233 port 56972 ssh2


Failed password for admin from 154.245.202.233 port 57662 ssh2


Failed password for admin from 154.245.202.233 port 44142 ssh2


Failed password for admin from 154.245.202.233 port 41663 ssh2


Failed password for admin from 154.245.202.233 port 59886 ssh2


Failed password for admin from 154.245.202.233 port 42430 ssh2


Failed password for admin from 154.245.202.233 port 57205 ssh2


Failed password for admin from 154.245.202.233 port 48557 ssh2


Failed password for admin from 154.245.202.233 port 42738 ssh2


Failed password for admin from 154.245.202.233 port 57986 ssh2


Accepted password for admin from 154.245.202.233 port 51234 ssh2


Failed password for admin from 154.245.202.233 port 43065 ssh2


172.153.162.35 - - "GET /dashboard HTTP/1.1" 200 7850


91.219.236.18 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 22


Accepted password for www-data from 10.0.4.146 port 40888 ssh2


Failed password for root from 185.220.101.34 port 54214 ssh2


Failed password for root from 185.220.101.34 port 56658 ssh2


Failed password for root from 185.220.101.34 port 43232 ssh2


Failed password for root from 185.220.101.34 port 45842 ssh2


Failed password for root from 185.220.101.34 port 50495 ssh2


Failed password for root from 185.220.101.34 port 46671 ssh2


Failed password for root from 185.220.101.34 port 52151 ssh2


Failed password for root from 185.220.101.34 port 52500 ssh2


Failed password for root from 185.220.101.34 port 41465 ssh2


Failed password for root from 185.220.101.34 port 46085 ssh2


Failed password for root from 185.220.101.34 port 43811 ssh2


Failed password for root from 185.220.101.34 port 50838 ssh2


Failed password for root from 185.220.101.34 port 52776 ssh2


Failed password for root from 185.220.101.34 port 52182 ssh2


Failed password for root from 185.220.101.34 port 46774 ssh2


Failed password for root from 185.220.101.34 port 44642 ssh2


Failed password for root from 185.220.101.34 port 48933 ssh2


Failed password for root from 185.220.101.34 port 40155 ssh2


Failed password for root from 185.220.101.34 port 40510 ssh2


Failed password for root from 185.220.101.34 port 41466 ssh2


Failed password for root from 185.220.101.34 port 58695 ssh2


Failed password for root from 185.220.101.34 port 40335 ssh2


Failed password for root from 185.220.101.34 port 48066 ssh2


Failed password for root from 185.220.101.34 port 48460 ssh2


Failed password for root from 185.220.101.34 port 50149 ssh2


31.235.148.166 - - "GET /login HTTP/1.1" 200 1646


ALLOW IN=58.81.84.184 OUT= PROTO=TCP DPT=80


ALLOW IN=163.229.7.27 OUT= PROTO=TCP DPT=443


174.218.202.233 - - "GET /dashboard HTTP/1.1" 200 2677


34.59.64.231 - - "GET / HTTP/1.1" 200 2082


ALLOW IN=211.82.223.91 OUT= PROTO=TCP DPT=443


ALLOW IN=181.120.44.173 OUT= PROTO=TCP DPT=80


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=99.210.135.99 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


ALLOW IN=58.98.110.190 OUT= PROTO=TCP DPT=443


131.167.79.135 - - "GET /login HTTP/1.1" 200 3132


ALLOW IN=22.7.127.209 OUT= PROTO=TCP DPT=80


193.27.228.114 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 293


ALLOW IN=136.32.63.193 OUT= PROTO=TCP DPT=80


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=27.12.188.84 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


ALLOW IN=34.87.220.139 OUT= PROTO=TCP DPT=443


34.178.113.227 - - "GET /login HTTP/1.1" 200 5634


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash


Accepted password for nattapong from 10.0.2.29 port 51437 ssh2


174.85.60.126 - - "GET /static/app.js HTTP/1.1" 200 5134


ALLOW IN=12.33.107.172 OUT= PROTO=TCP DPT=80


ALLOW IN=36.136.126.198 OUT= PROTO=TCP DPT=80


ALLOW IN=217.116.162.213 OUT= PROTO=TCP DPT=443


ALLOW IN=216.159.110.60 OUT= PROTO=TCP DPT=80


ALLOW IN=106.29.13.185 OUT= PROTO=TCP DPT=80


108.55.232.97 - - "GET /static/app.js HTTP/1.1" 200 3840


ALLOW IN=138.249.68.20 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=865 interval=60s


Accepted password for svc_backup from 10.0.0.47 port 57604 ssh2


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=582 interval=60s


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=648 interval=60s


Accepted password for guest from 10.0.5.231 port 42149 ssh2


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=729 interval=60s


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=662 interval=60s


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=323 interval=60s


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=453 interval=60s


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=430 interval=60s


140.112.237.198 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 99


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=265 interval=60s


ALLOW IN=145.19.172.225 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.81 dst=193.27.228.114 dport=443 bytes=546 interval=60s


125.156.197.2 - - "GET /api/products HTTP/1.1" 200 1629


153.60.241.136 - - "GET /api/orders?page=2 HTTP/1.1" 200 5610


168.49.244.127 - - "GET /api/orders?page=2 HTTP/1.1" 200 7008


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


Accepted password for oppa from 10.0.1.61 port 52551 ssh2


ALLOW IN=83.12.191.132 OUT= PROTO=TCP DPT=443


ALLOW IN=198.114.178.230 OUT= PROTO=TCP DPT=80


193.27.228.114 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 403 298


ALLOW IN=221.144.113.21 OUT= PROTO=TCP DPT=80


ALLOW IN=71.242.134.214 OUT= PROTO=TCP DPT=80


ALLOW IN=184.180.74.132 OUT= PROTO=TCP DPT=443


Accepted password for svc_backup from 10.0.3.28 port 58411 ssh2


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


Accepted password for deploy from 10.0.2.160 port 50335 ssh2


ALLOW IN=180.173.95.121 OUT= PROTO=TCP DPT=80


ALLOW IN=49.48.200.50 OUT= PROTO=TCP DPT=443


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


ALLOW IN=26.17.38.242 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.82 dst=45.137.21.9 dport=443 bytes=798 interval=30s


ALLOW IN=19.115.88.231 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.82 dst=45.137.21.9 dport=443 bytes=688 interval=30s


Accepted password for somchai from 10.0.5.37 port 59039 ssh2


CONN src=10.0.5.82 dst=45.137.21.9 dport=443 bytes=714 interval=30s


CONN src=10.0.5.82 dst=45.137.21.9 dport=443 bytes=743 interval=30s


CONN src=10.0.5.82 dst=45.137.21.9 dport=443 bytes=361 interval=30s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


Accepted password for deploy from 10.0.1.242 port 59656 ssh2


ALLOW IN=88.4.153.239 OUT= PROTO=TCP DPT=80


14.193.34.187 - - "GET / HTTP/1.1" 200 3382


127.164.96.252 - - "GET /api/orders?page=2 HTTP/1.1" 200 2156


26.40.165.202 - - "GET /dashboard HTTP/1.1" 200 1010


125.199.244.51 - - "GET /static/app.js HTTP/1.1" 200 6500


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/passwd root


Accepted password for nattapong from 10.0.5.56 port 52427 ssh2


ALLOW IN=212.226.176.228 OUT= PROTO=TCP DPT=443


147.194.117.64 - - "GET /dashboard HTTP/1.1" 200 3035


126.89.135.234 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 301


Accepted password for postgres from 10.0.3.10 port 40976 ssh2


Failed password for svc_backup from 193.27.228.114 port 49250 ssh2


Failed password for svc_backup from 193.27.228.114 port 52710 ssh2


Failed password for svc_backup from 193.27.228.114 port 55339 ssh2


Failed password for svc_backup from 193.27.228.114 port 44653 ssh2


Failed password for svc_backup from 193.27.228.114 port 42180 ssh2


Failed password for svc_backup from 193.27.228.114 port 58335 ssh2


Failed password for svc_backup from 193.27.228.114 port 55793 ssh2


Failed password for svc_backup from 193.27.228.114 port 46632 ssh2


Failed password for svc_backup from 193.27.228.114 port 44968 ssh2


Failed password for svc_backup from 193.27.228.114 port 45163 ssh2


Failed password for svc_backup from 193.27.228.114 port 54016 ssh2


Failed password for svc_backup from 193.27.228.114 port 50821 ssh2


Failed password for svc_backup from 193.27.228.114 port 52156 ssh2


Failed password for svc_backup from 193.27.228.114 port 50483 ssh2


Failed password for svc_backup from 193.27.228.114 port 48771 ssh2


Failed password for svc_backup from 193.27.228.114 port 55888 ssh2


Failed password for svc_backup from 193.27.228.114 port 45857 ssh2


Failed password for svc_backup from 193.27.228.114 port 46816 ssh2


Failed password for svc_backup from 193.27.228.114 port 52591 ssh2


Failed password for svc_backup from 193.27.228.114 port 59415 ssh2


Failed password for svc_backup from 193.27.228.114 port 50376 ssh2


Failed password for svc_backup from 193.27.228.114 port 51172 ssh2


Accepted password for svc_backup from 193.27.228.114 port 51234 ssh2


Failed password for svc_backup from 193.27.228.114 port 47273 ssh2


51.76.1.26 - - "GET /login HTTP/1.1" 200 4586


Failed password for svc_backup from 193.27.228.114 port 42006 ssh2


ALLOW IN=143.202.25.169 OUT= PROTO=TCP DPT=443


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


ALLOW IN=95.151.242.230 OUT= PROTO=TCP DPT=443


ALLOW IN=104.17.19.146 OUT= PROTO=TCP DPT=443


157.20.249.67 - - "GET /login HTTP/1.1" 200 5183


ALLOW IN=21.1.205.119 OUT= PROTO=TCP DPT=80


28.198.25.99 - - "GET /api/orders?page=2 HTTP/1.1" 200 831


Failed password for somchai from 132.245.148.75 port 56153 ssh2


Failed password for somchai from 132.245.148.75 port 49017 ssh2


Failed password for somchai from 132.245.148.75 port 52642 ssh2


Failed password for somchai from 132.245.148.75 port 49287 ssh2


Failed password for somchai from 132.245.148.75 port 53660 ssh2


Failed password for somchai from 132.245.148.75 port 43517 ssh2


Failed password for somchai from 132.245.148.75 port 59023 ssh2


Failed password for somchai from 132.245.148.75 port 44855 ssh2


Failed password for somchai from 132.245.148.75 port 43936 ssh2


Failed password for somchai from 132.245.148.75 port 41116 ssh2


Failed password for somchai from 132.245.148.75 port 52760 ssh2


Accepted password for oppa from 10.0.3.252 port 47012 ssh2


Accepted password for nattapong from 10.0.0.50 port 51874 ssh2


113.4.151.31 - - "GET /dashboard HTTP/1.1" 200 2610


ALLOW IN=124.12.197.162 OUT= PROTO=TCP DPT=443


148.233.22.73 - - "GET /api/products HTTP/1.1" 200 346


OUTBOUND src=10.0.0.141 dst=45.137.21.9 bytes=3847225344 proto=TCP dport=443 duration=509s


11.91.171.88 - - "GET / HTTP/1.1" 200 6168


OUTBOUND src=10.0.0.161 dst=91.219.236.18 bytes=7116685312 proto=TCP dport=443 duration=513s


Accepted password for root from 10.0.3.12 port 56561 ssh2


ALLOW IN=202.34.78.239 OUT= PROTO=TCP DPT=443


ALLOW IN=110.178.179.136 OUT= PROTO=TCP DPT=80


ALLOW IN=191.38.53.85 OUT= PROTO=TCP DPT=443


Accepted password for root from 10.0.4.174 port 40554 ssh2


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=678 interval=60s


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=621 interval=60s


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=346 interval=60s


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=652 interval=60s


CONN src=10.0.5.201 dst=193.27.228.114 dport=443 bytes=208 interval=300s


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=456 interval=60s


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=532 interval=60s


CONN src=10.0.0.183 dst=193.27.228.114 dport=443 bytes=899 interval=60s


CONN src=10.0.5.201 dst=193.27.228.114 dport=443 bytes=827 interval=300s


Failed password for oppa from 155.30.168.46 port 45841 ssh2


Failed password for oppa from 155.30.168.46 port 42806 ssh2


Failed password for oppa from 155.30.168.46 port 58691 ssh2


Failed password for oppa from 155.30.168.46 port 43805 ssh2


Failed password for oppa from 155.30.168.46 port 49509 ssh2


Failed password for oppa from 155.30.168.46 port 43363 ssh2


Failed password for oppa from 155.30.168.46 port 49314 ssh2


Failed password for oppa from 155.30.168.46 port 42755 ssh2


Failed password for oppa from 155.30.168.46 port 56817 ssh2


Failed password for oppa from 155.30.168.46 port 49277 ssh2


Failed password for oppa from 155.30.168.46 port 56507 ssh2


Failed password for oppa from 155.30.168.46 port 59021 ssh2


Failed password for oppa from 155.30.168.46 port 49322 ssh2


Failed password for oppa from 155.30.168.46 port 53506 ssh2


Failed password for oppa from 155.30.168.46 port 59909 ssh2


Failed password for oppa from 155.30.168.46 port 53001 ssh2


Failed password for oppa from 155.30.168.46 port 59040 ssh2


34.143.162.41 - - "GET /login HTTP/1.1" 200 3171


193.27.228.114 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 200 189


CONN src=10.0.5.201 dst=193.27.228.114 dport=443 bytes=643 interval=300s


Accepted password for admin from 10.0.4.248 port 49981 ssh2


Accepted password for svc_backup from 10.0.1.130 port 58762 ssh2


Accepted password for nattapong from 10.0.3.227 port 55883 ssh2


195.68.209.230 - - "GET /static/app.js HTTP/1.1" 200 2615


148.252.117.99 - - "GET / HTTP/1.1" 200 4959


CONN src=10.0.5.201 dst=193.27.228.114 dport=443 bytes=709 interval=300s


CONN src=10.0.5.201 dst=193.27.228.114 dport=443 bytes=407 interval=300s


18.200.80.242 - - "GET /static/app.js HTTP/1.1" 200 1921


CONN src=10.0.5.201 dst=193.27.228.114 dport=443 bytes=819 interval=300s


Accepted password for guest from 10.0.2.142 port 56768 ssh2


Failed password for svc_backup from 91.219.236.18 port 45904 ssh2


Failed password for svc_backup from 91.219.236.18 port 58762 ssh2


Failed password for svc_backup from 91.219.236.18 port 42851 ssh2


Failed password for svc_backup from 91.219.236.18 port 52701 ssh2


Failed password for svc_backup from 91.219.236.18 port 51405 ssh2


Failed password for svc_backup from 91.219.236.18 port 54104 ssh2


Failed password for svc_backup from 91.219.236.18 port 58455 ssh2


Failed password for svc_backup from 91.219.236.18 port 54864 ssh2


Failed password for svc_backup from 91.219.236.18 port 41949 ssh2


Failed password for svc_backup from 91.219.236.18 port 41564 ssh2


Failed password for svc_backup from 91.219.236.18 port 52947 ssh2


Failed password for svc_backup from 91.219.236.18 port 53755 ssh2


Failed password for svc_backup from 91.219.236.18 port 50850 ssh2


Accepted password for admin from 10.0.3.28 port 44580 ssh2


Failed password for root from 193.27.228.114 port 41131 ssh2


Failed password for root from 193.27.228.114 port 49270 ssh2


Failed password for root from 193.27.228.114 port 58534 ssh2


Failed password for root from 193.27.228.114 port 44584 ssh2


Failed password for root from 193.27.228.114 port 43350 ssh2


Failed password for root from 193.27.228.114 port 41290 ssh2


Failed password for root from 193.27.228.114 port 51806 ssh2


Failed password for root from 193.27.228.114 port 41830 ssh2


Failed password for root from 193.27.228.114 port 42093 ssh2


Failed password for root from 193.27.228.114 port 53521 ssh2


Failed password for root from 193.27.228.114 port 44321 ssh2


Failed password for root from 193.27.228.114 port 51080 ssh2


Failed password for root from 193.27.228.114 port 45353 ssh2


Failed password for root from 193.27.228.114 port 42279 ssh2


Failed password for root from 193.27.228.114 port 47700 ssh2


Failed password for root from 193.27.228.114 port 53125 ssh2


Failed password for root from 193.27.228.114 port 42036 ssh2


Failed password for root from 193.27.228.114 port 53643 ssh2


193.27.228.114 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 370


Accepted password for root from 10.0.5.140 port 40483 ssh2


Accepted password for www-data from 10.0.5.241 port 55587 ssh2


157.193.176.105 - - "GET /api/orders?page=2 HTTP/1.1" 200 796


Accepted password for oppa from 10.0.1.112 port 45513 ssh2


185.220.101.34 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 500 228


Accepted password for admin from 10.0.3.188 port 56273 ssh2


ALLOW IN=60.211.95.218 OUT= PROTO=TCP DPT=443


Accepted password for nattapong from 10.0.0.157 port 59405 ssh2


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 176


Accepted password for deploy from 10.0.2.189 port 49198 ssh2


ALLOW IN=175.74.56.69 OUT= PROTO=TCP DPT=443


Accepted password for postgres from 10.0.0.25 port 43539 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


Accepted password for postgres from 10.0.5.45 port 47975 ssh2


Accepted password for oppa from 10.0.1.144 port 45079 ssh2


ALLOW IN=131.143.127.250 OUT= PROTO=TCP DPT=80


ALLOW IN=126.110.210.25 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=533 interval=30s


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=619 interval=30s


193.27.228.114 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 422


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=661 interval=30s


Failed password for svc_backup from 63.236.88.31 port 48094 ssh2


Failed password for svc_backup from 63.236.88.31 port 59599 ssh2


Failed password for svc_backup from 63.236.88.31 port 56284 ssh2


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=368 interval=30s


Failed password for svc_backup from 63.236.88.31 port 51055 ssh2


Failed password for svc_backup from 63.236.88.31 port 48048 ssh2


Failed password for svc_backup from 63.236.88.31 port 48346 ssh2


Failed password for svc_backup from 63.236.88.31 port 55870 ssh2


Failed password for svc_backup from 63.236.88.31 port 46190 ssh2


Failed password for svc_backup from 63.236.88.31 port 48871 ssh2


Failed password for svc_backup from 63.236.88.31 port 55043 ssh2


Failed password for svc_backup from 63.236.88.31 port 44077 ssh2


Failed password for svc_backup from 63.236.88.31 port 51186 ssh2


Failed password for svc_backup from 63.236.88.31 port 58044 ssh2


Failed password for svc_backup from 63.236.88.31 port 40107 ssh2


Failed password for svc_backup from 63.236.88.31 port 42360 ssh2


Failed password for svc_backup from 63.236.88.31 port 56221 ssh2


Failed password for svc_backup from 63.236.88.31 port 58043 ssh2


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=458 interval=30s


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=412 interval=30s


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=718 interval=30s


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=245 interval=30s


CONN src=10.0.2.21 dst=45.137.21.9 dport=443 bytes=673 interval=30s


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/passwd root


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=702 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=305 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=212 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=787 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=491 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=680 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=690 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=651 interval=30s


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=548 interval=30s


195.160.176.3 - - "GET /health HTTP/1.1" 200 2491


CONN src=10.0.5.243 dst=185.220.101.34 dport=443 bytes=388 interval=30s


Accepted password for guest from 10.0.5.145 port 45992 ssh2


ALLOW IN=149.240.243.144 OUT= PROTO=TCP DPT=80


Accepted password for postgres from 10.0.1.3 port 42326 ssh2


Accepted password for www-data from 10.0.4.187 port 58594 ssh2


CONN src=10.0.2.94 dst=91.219.236.18 dport=443 bytes=585 interval=300s


133.116.8.137 - - "GET /login HTTP/1.1" 200 7021


54.92.156.44 - - "GET /api/orders?page=2 HTTP/1.1" 200 7095


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 439


CONN src=10.0.2.94 dst=91.219.236.18 dport=443 bytes=671 interval=300s


20.249.204.125 - - "GET /static/app.js HTTP/1.1" 200 5041


CONN src=10.0.2.94 dst=91.219.236.18 dport=443 bytes=553 interval=300s


ALLOW IN=131.51.64.223 OUT= PROTO=TCP DPT=80


CONN src=10.0.2.94 dst=91.219.236.18 dport=443 bytes=835 interval=300s


CONN src=10.0.2.94 dst=91.219.236.18 dport=443 bytes=382 interval=300s


Accepted password for nattapong from 10.0.4.141 port 52874 ssh2


Accepted password for guest from 10.0.5.141 port 49757 ssh2


12.110.198.133 - - "GET /dashboard HTTP/1.1" 200 596


Accepted password for root from 10.0.2.125 port 49998 ssh2


215.232.147.188 - - "GET /api/orders?page=2 HTTP/1.1" 200 1255


109.79.229.66 - - "GET /static/app.js HTTP/1.1" 200 256


Failed password for postgres from 209.141.56.12 port 40641 ssh2


Failed password for postgres from 209.141.56.12 port 58149 ssh2


Failed password for postgres from 209.141.56.12 port 58610 ssh2


Failed password for postgres from 209.141.56.12 port 43554 ssh2


Failed password for postgres from 209.141.56.12 port 40047 ssh2


Failed password for postgres from 209.141.56.12 port 46337 ssh2


Accepted password for postgres from 209.141.56.12 port 51234 ssh2


Failed password for postgres from 209.141.56.12 port 50038 ssh2


Failed password for postgres from 209.141.56.12 port 53921 ssh2


137.24.201.77 - - "GET /api/orders?page=2 HTTP/1.1" 200 3923


Failed password for postgres from 45.137.21.9 port 48589 ssh2


Failed password for postgres from 45.137.21.9 port 40470 ssh2


Failed password for postgres from 45.137.21.9 port 50313 ssh2


Failed password for postgres from 45.137.21.9 port 51933 ssh2


Failed password for postgres from 45.137.21.9 port 58717 ssh2


Failed password for postgres from 45.137.21.9 port 54519 ssh2


Failed password for postgres from 45.137.21.9 port 56594 ssh2


Failed password for postgres from 45.137.21.9 port 57613 ssh2


Failed password for postgres from 45.137.21.9 port 52108 ssh2


Failed password for postgres from 45.137.21.9 port 50109 ssh2


Failed password for postgres from 45.137.21.9 port 47232 ssh2


Failed password for postgres from 45.137.21.9 port 44287 ssh2


Failed password for postgres from 45.137.21.9 port 53252 ssh2


Failed password for postgres from 45.137.21.9 port 44286 ssh2


Failed password for postgres from 45.137.21.9 port 40946 ssh2


Failed password for postgres from 45.137.21.9 port 51026 ssh2


Accepted password for postgres from 45.137.21.9 port 51234 ssh2


Failed password for postgres from 45.137.21.9 port 46039 ssh2


Failed password for postgres from 45.137.21.9 port 49476 ssh2


Accepted password for nattapong from 10.0.0.88 port 51031 ssh2


ALLOW IN=142.208.52.7 OUT= PROTO=TCP DPT=80


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN