182.124.215.13 - - "GET /health HTTP/1.1" 200 1134


ALLOW IN=203.163.94.60 OUT= PROTO=TCP DPT=443


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


ALLOW IN=77.99.43.134 OUT= PROTO=TCP DPT=80


ALLOW IN=74.39.54.227 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.2.213 port 51297 ssh2


Accepted password for deploy from 10.0.3.168 port 54268 ssh2


176.235.119.136 - - "GET /dashboard HTTP/1.1" 200 7092


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=690 interval=60s


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=769 interval=60s


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=638 interval=60s


197.111.69.191 - - "GET /login HTTP/1.1" 200 878


46.205.63.121 - - "GET /api/products HTTP/1.1" 200 5707


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=726 interval=60s


91.219.236.18 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 128


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=890 interval=60s


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=631 interval=60s


CONN src=10.0.4.228 dst=209.141.56.12 dport=443 bytes=329 interval=60s


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


115.66.225.94 - - "GET /static/app.js HTTP/1.1" 200 7120


32.64.39.218 - - "GET /health HTTP/1.1" 200 2476


Accepted password for www-data from 10.0.5.228 port 43683 ssh2


ALLOW IN=52.131.120.104 OUT= PROTO=TCP DPT=80


144.39.77.45 - - "GET /health HTTP/1.1" 200 6452


146.250.202.141 - - "GET /static/app.js HTTP/1.1" 200 6149


125.166.126.170 - - "GET /dashboard HTTP/1.1" 200 1148


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


Accepted password for root from 10.0.5.123 port 49748 ssh2


91.219.236.18 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 378


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


ALLOW IN=52.73.162.15 OUT= PROTO=TCP DPT=80


Accepted password for root from 10.0.2.114 port 49522 ssh2


149.35.39.252 - - "GET /login HTTP/1.1" 200 7353


Accepted password for oppa from 10.0.5.105 port 49845 ssh2


OUTBOUND src=10.0.4.60 dst=209.141.56.12 bytes=3212836864 proto=TCP dport=443 duration=391s


Accepted password for oppa from 10.0.3.38 port 41103 ssh2


ALLOW IN=132.83.117.181 OUT= PROTO=TCP DPT=80


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/su -


17.212.34.11 - - "GET /login HTTP/1.1" 200 5030


110.183.34.224 - - "GET /health HTTP/1.1" 200 1493


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


54.150.199.71 - - "GET /api/orders?page=2 HTTP/1.1" 200 7883


ALLOW IN=99.67.91.129 OUT= PROTO=TCP DPT=443


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/bash


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


Failed password for guest from 185.220.101.34 port 43860 ssh2


Failed password for guest from 185.220.101.34 port 56155 ssh2


Failed password for guest from 185.220.101.34 port 48427 ssh2


Failed password for guest from 185.220.101.34 port 47340 ssh2


Failed password for guest from 185.220.101.34 port 51737 ssh2


Failed password for guest from 185.220.101.34 port 53312 ssh2


Failed password for guest from 185.220.101.34 port 50429 ssh2


Failed password for guest from 185.220.101.34 port 43656 ssh2


Failed password for guest from 185.220.101.34 port 57346 ssh2


Failed password for guest from 185.220.101.34 port 54281 ssh2


Failed password for guest from 185.220.101.34 port 53215 ssh2


ALLOW IN=79.202.138.228 OUT= PROTO=TCP DPT=443


168.228.100.53 - - "GET /api/orders?page=2 HTTP/1.1" 200 7387


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 202


Failed password for www-data from 209.141.56.12 port 49434 ssh2


Failed password for www-data from 209.141.56.12 port 42280 ssh2


Failed password for www-data from 209.141.56.12 port 57804 ssh2


Failed password for www-data from 209.141.56.12 port 44381 ssh2


Failed password for www-data from 209.141.56.12 port 42061 ssh2


Failed password for www-data from 209.141.56.12 port 47157 ssh2


Failed password for www-data from 209.141.56.12 port 46559 ssh2


Failed password for www-data from 209.141.56.12 port 52358 ssh2


Failed password for www-data from 209.141.56.12 port 44692 ssh2


Failed password for www-data from 209.141.56.12 port 40232 ssh2


Failed password for www-data from 209.141.56.12 port 49989 ssh2


Failed password for www-data from 209.141.56.12 port 43034 ssh2


Failed password for www-data from 209.141.56.12 port 40265 ssh2


45.62.140.85 - - "GET /static/app.js HTTP/1.1" 200 3589


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


193.27.228.114 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 200 414


ALLOW IN=169.185.98.181 OUT= PROTO=TCP DPT=80


Accepted password for somchai from 10.0.2.128 port 42313 ssh2


65.1.201.56 - - "GET /api/products HTTP/1.1" 200 7811


Failed password for somchai from 91.219.236.18 port 52293 ssh2


Failed password for somchai from 91.219.236.18 port 57767 ssh2


Failed password for somchai from 91.219.236.18 port 51514 ssh2


Failed password for somchai from 91.219.236.18 port 52704 ssh2


Failed password for somchai from 91.219.236.18 port 48401 ssh2


Failed password for somchai from 91.219.236.18 port 53242 ssh2


Failed password for somchai from 91.219.236.18 port 55314 ssh2


Failed password for somchai from 91.219.236.18 port 49729 ssh2


Failed password for somchai from 91.219.236.18 port 42200 ssh2


81.229.146.141 - - "GET /static/app.js HTTP/1.1" 200 200


185.220.101.34 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 231


Accepted password for somchai from 10.0.5.245 port 44361 ssh2


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=724 interval=60s


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=506 interval=60s


40.131.128.178 - - "GET /dashboard HTTP/1.1" 200 3289


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=760 interval=60s


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=521 interval=60s


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=766 interval=60s


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=847 interval=60s


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=422 interval=60s


ALLOW IN=43.117.69.170 OUT= PROTO=TCP DPT=80


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=405 interval=60s


CONN src=10.0.1.37 dst=91.219.236.18 dport=443 bytes=414 interval=60s


Accepted password for oppa from 10.0.1.157 port 49579 ssh2


214.15.132.128 - - "GET /api/products HTTP/1.1" 200 4135


Accepted password for somchai from 10.0.2.3 port 43786 ssh2


113.49.210.60 - - "GET /health HTTP/1.1" 200 5111


CONN src=10.0.0.121 dst=185.220.101.34 dport=443 bytes=431 interval=30s


CONN src=10.0.0.121 dst=185.220.101.34 dport=443 bytes=892 interval=30s


CONN src=10.0.0.121 dst=185.220.101.34 dport=443 bytes=890 interval=30s


CONN src=10.0.0.121 dst=185.220.101.34 dport=443 bytes=606 interval=30s


CONN src=10.0.0.121 dst=185.220.101.34 dport=443 bytes=770 interval=30s


CONN src=10.0.0.121 dst=185.220.101.34 dport=443 bytes=574 interval=30s


212.48.84.83 - - "GET /login HTTP/1.1" 200 3445


122.189.143.109 - - "GET /health HTTP/1.1" 200 3989


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


145.167.15.170 - - "GET /health HTTP/1.1" 200 357


ALLOW IN=57.57.72.184 OUT= PROTO=TCP DPT=443


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=48.94.229.164 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


Accepted password for guest from 10.0.1.235 port 58253 ssh2


ALLOW IN=60.164.42.243 OUT= PROTO=TCP DPT=80


Accepted password for guest from 10.0.0.44 port 58054 ssh2


203.138.106.202 - - "GET /api/orders?page=2 HTTP/1.1" 200 863


Accepted password for svc_backup from 10.0.3.67 port 57171 ssh2


Accepted password for root from 10.0.4.125 port 54383 ssh2


Accepted password for somchai from 10.0.2.243 port 53733 ssh2


CONN src=10.0.0.71 dst=45.137.21.9 dport=443 bytes=767 interval=30s


CONN src=10.0.0.71 dst=45.137.21.9 dport=443 bytes=474 interval=30s


CONN src=10.0.0.71 dst=45.137.21.9 dport=443 bytes=663 interval=30s


CONN src=10.0.0.71 dst=45.137.21.9 dport=443 bytes=819 interval=30s


CONN src=10.0.0.71 dst=45.137.21.9 dport=443 bytes=318 interval=30s


ALLOW IN=95.205.131.158 OUT= PROTO=TCP DPT=443


Failed password for postgres from 45.137.21.9 port 43832 ssh2


Failed password for postgres from 45.137.21.9 port 52232 ssh2


Failed password for postgres from 45.137.21.9 port 58835 ssh2


Failed password for postgres from 45.137.21.9 port 44632 ssh2


Failed password for postgres from 45.137.21.9 port 55947 ssh2


Failed password for postgres from 45.137.21.9 port 59543 ssh2


Failed password for postgres from 45.137.21.9 port 52729 ssh2


Failed password for postgres from 45.137.21.9 port 53862 ssh2


Failed password for postgres from 45.137.21.9 port 46130 ssh2


Failed password for postgres from 45.137.21.9 port 49464 ssh2


Failed password for postgres from 45.137.21.9 port 57608 ssh2


Failed password for postgres from 45.137.21.9 port 54778 ssh2


Failed password for postgres from 45.137.21.9 port 45676 ssh2


Failed password for postgres from 45.137.21.9 port 45467 ssh2


Failed password for postgres from 45.137.21.9 port 41756 ssh2


191.106.250.82 - - "GET /dashboard HTTP/1.1" 200 3057


117.241.47.223 - - "GET /api/products HTTP/1.1" 200 6989


112.94.165.165 - - "GET /api/products HTTP/1.1" 200 7067


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=542 interval=30s


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=254 interval=30s


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=656 interval=30s


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=654 interval=30s


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=483 interval=30s


Failed password for somchai from 185.220.101.34 port 50691 ssh2


Failed password for somchai from 185.220.101.34 port 55729 ssh2


Failed password for somchai from 185.220.101.34 port 51077 ssh2


Failed password for somchai from 185.220.101.34 port 52366 ssh2


Failed password for somchai from 185.220.101.34 port 40851 ssh2


Failed password for somchai from 185.220.101.34 port 42670 ssh2


Failed password for somchai from 185.220.101.34 port 44932 ssh2


Failed password for somchai from 185.220.101.34 port 42843 ssh2


Failed password for somchai from 185.220.101.34 port 47132 ssh2


Failed password for somchai from 185.220.101.34 port 51310 ssh2


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=251 interval=30s


Failed password for somchai from 185.220.101.34 port 41542 ssh2


Failed password for somchai from 185.220.101.34 port 47226 ssh2


Failed password for somchai from 185.220.101.34 port 55923 ssh2


Failed password for somchai from 185.220.101.34 port 56817 ssh2


Failed password for somchai from 185.220.101.34 port 48013 ssh2


Failed password for somchai from 185.220.101.34 port 50827 ssh2


Failed password for somchai from 185.220.101.34 port 59755 ssh2


Failed password for somchai from 185.220.101.34 port 43275 ssh2


Failed password for somchai from 185.220.101.34 port 56152 ssh2


Failed password for somchai from 185.220.101.34 port 59100 ssh2


Failed password for somchai from 185.220.101.34 port 55800 ssh2


CONN src=10.0.1.140 dst=91.219.236.18 dport=443 bytes=602 interval=30s


Failed password for somchai from 185.220.101.34 port 58946 ssh2


Accepted password for admin from 10.0.3.57 port 44414 ssh2


Accepted password for deploy from 10.0.0.54 port 41018 ssh2


170.169.205.97 - - "GET /login HTTP/1.1" 200 3097


220.89.15.244 - - "GET /dashboard HTTP/1.1" 200 7200


193.27.228.114 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 271


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/bin/bash


105.194.34.195 - - "GET /dashboard HTTP/1.1" 200 7108


209.141.56.12 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 496


128.189.202.14 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 430


OUTBOUND src=10.0.4.65 dst=185.220.101.34 bytes=3454009344 proto=TCP dport=443 duration=341s


CONN src=10.0.2.63 dst=209.141.56.12 dport=443 bytes=878 interval=30s


CONN src=10.0.2.63 dst=209.141.56.12 dport=443 bytes=671 interval=30s


211.39.184.65 - - "GET /login HTTP/1.1" 200 6105


CONN src=10.0.2.63 dst=209.141.56.12 dport=443 bytes=684 interval=30s


CONN src=10.0.2.63 dst=209.141.56.12 dport=443 bytes=573 interval=30s


38.122.2.206 - - "GET /static/app.js HTTP/1.1" 200 4026


CONN src=10.0.2.63 dst=209.141.56.12 dport=443 bytes=737 interval=30s


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/su -


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=22.197.179.181 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


Accepted password for admin from 10.0.2.183 port 58211 ssh2


ALLOW IN=12.36.170.223 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.5.97 port 42260 ssh2


ALLOW IN=153.12.68.70 OUT= PROTO=TCP DPT=443


Failed password for guest from 90.209.167.104 port 44170 ssh2


Failed password for guest from 90.209.167.104 port 53777 ssh2


Failed password for guest from 90.209.167.104 port 52423 ssh2


Failed password for guest from 90.209.167.104 port 54086 ssh2


Failed password for guest from 90.209.167.104 port 45702 ssh2


Failed password for guest from 90.209.167.104 port 53306 ssh2


Failed password for guest from 90.209.167.104 port 58648 ssh2


Failed password for guest from 90.209.167.104 port 49401 ssh2


Failed password for guest from 90.209.167.104 port 40013 ssh2


Failed password for guest from 90.209.167.104 port 54476 ssh2


Failed password for guest from 90.209.167.104 port 47002 ssh2


Failed password for guest from 90.209.167.104 port 59879 ssh2


Failed password for guest from 90.209.167.104 port 50559 ssh2


Failed password for guest from 90.209.167.104 port 56890 ssh2


Failed password for guest from 90.209.167.104 port 55505 ssh2


Failed password for guest from 90.209.167.104 port 45560 ssh2


ALLOW IN=104.146.38.144 OUT= PROTO=TCP DPT=80


Failed password for guest from 90.209.167.104 port 42778 ssh2


Accepted password for guest from 10.0.3.77 port 58629 ssh2


26.89.218.143 - - "GET /dashboard HTTP/1.1" 200 584


Accepted password for somchai from 10.0.3.212 port 58764 ssh2


ALLOW IN=189.101.71.34 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.2.16 port 47887 ssh2


Accepted password for admin from 10.0.5.166 port 52769 ssh2


ALLOW IN=144.167.253.129 OUT= PROTO=TCP DPT=80


ALLOW IN=164.254.186.190 OUT= PROTO=TCP DPT=443


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=32.18.171.100 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


63.96.200.76 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 403 197


Accepted password for nattapong from 10.0.1.56 port 50318 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash


CONN src=10.0.3.228 dst=185.220.101.34 dport=443 bytes=706 interval=60s


CONN src=10.0.3.228 dst=185.220.101.34 dport=443 bytes=634 interval=60s


CONN src=10.0.3.228 dst=185.220.101.34 dport=443 bytes=409 interval=60s


73.207.152.117 - - "GET / HTTP/1.1" 200 5841


CONN src=10.0.3.228 dst=185.220.101.34 dport=443 bytes=423 interval=60s


CONN src=10.0.3.228 dst=185.220.101.34 dport=443 bytes=200 interval=60s


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/bash


CONN src=10.0.3.228 dst=185.220.101.34 dport=443 bytes=503 interval=60s


ALLOW IN=147.195.157.188 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.1.72 port 41491 ssh2


Accepted password for guest from 10.0.2.209 port 42031 ssh2


167.86.159.100 - - "GET /static/app.js HTTP/1.1" 200 3852


Accepted password for postgres from 10.0.4.97 port 44170 ssh2


OUTBOUND src=10.0.5.6 dst=209.141.56.12 bytes=1494220800 proto=TCP dport=443 duration=349s


28.241.151.2 - - "GET /login HTTP/1.1" 200 6767


185.220.101.34 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 227


210.149.125.135 - - "GET /api/products HTTP/1.1" 200 2812


ALLOW IN=147.47.86.152 OUT= PROTO=TCP DPT=80


ALLOW IN=126.226.46.152 OUT= PROTO=TCP DPT=80


ALLOW IN=145.21.141.208 OUT= PROTO=TCP DPT=80


ALLOW IN=67.119.252.248 OUT= PROTO=TCP DPT=443


ALLOW IN=142.124.25.96 OUT= PROTO=TCP DPT=443


145.171.33.239 - - "GET /static/app.js HTTP/1.1" 200 6394


Accepted password for svc_backup from 10.0.1.222 port 55741 ssh2


Accepted password for root from 10.0.4.210 port 44466 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/passwd root


105.74.156.86 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 403 157


63.250.135.160 - - "GET /api/orders?page=2 HTTP/1.1" 200 5333


77.186.215.156 - - "GET /dashboard HTTP/1.1" 200 1361


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=156.208.228.22 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=35.226.175.164 OUT= PROTO=TCP DPT=53 FLAGS=SYN


Accepted password for svc_backup from 10.0.4.212 port 54490 ssh2


Accepted password for deploy from 10.0.4.193 port 59125 ssh2


66.93.250.1 - - "GET / HTTP/1.1" 200 4685


ALLOW IN=19.83.25.143 OUT= PROTO=TCP DPT=80


ALLOW IN=190.119.219.168 OUT= PROTO=TCP DPT=80


212.237.69.162 - - "GET /api/products HTTP/1.1" 200 7692


109.111.171.64 - - "GET / HTTP/1.1" 200 6838


Accepted password for admin from 10.0.0.78 port 49529 ssh2


125.217.47.131 - - "GET /api/orders?page=2 HTTP/1.1" 200 6459


165.218.85.177 - - "GET /dashboard HTTP/1.1" 200 3079


ALLOW IN=99.203.70.219 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.1.122 port 43560 ssh2


ALLOW IN=118.193.78.243 OUT= PROTO=TCP DPT=80


13.230.225.137 - - "GET / HTTP/1.1" 200 5702


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


OUTBOUND src=10.0.2.161 dst=45.137.21.9 bytes=8334082048 proto=TCP dport=443 duration=383s


Accepted password for svc_backup from 10.0.2.118 port 43523 ssh2


208.136.39.197 - - "GET /dashboard HTTP/1.1" 200 1578


117.62.250.186 - - "GET /api/orders?page=2 HTTP/1.1" 200 3993


103.138.52.34 - - "GET / HTTP/1.1" 200 1735


91.219.236.18 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 403 231


Accepted password for svc_backup from 10.0.2.58 port 53923 ssh2


Accepted password for svc_backup from 10.0.2.247 port 53046 ssh2


Failed password for svc_backup from 193.27.228.114 port 44648 ssh2


Failed password for svc_backup from 193.27.228.114 port 57382 ssh2


Failed password for svc_backup from 193.27.228.114 port 41004 ssh2


Failed password for svc_backup from 193.27.228.114 port 52327 ssh2


Failed password for svc_backup from 193.27.228.114 port 54865 ssh2


Failed password for svc_backup from 193.27.228.114 port 41723 ssh2


Failed password for svc_backup from 193.27.228.114 port 45157 ssh2


Failed password for svc_backup from 193.27.228.114 port 45158 ssh2


Failed password for svc_backup from 193.27.228.114 port 50211 ssh2


Failed password for svc_backup from 193.27.228.114 port 50629 ssh2


Failed password for svc_backup from 193.27.228.114 port 59537 ssh2


Failed password for svc_backup from 193.27.228.114 port 54519 ssh2


Failed password for svc_backup from 193.27.228.114 port 59892 ssh2


Failed password for svc_backup from 193.27.228.114 port 53571 ssh2


Failed password for svc_backup from 193.27.228.114 port 41630 ssh2


Failed password for svc_backup from 193.27.228.114 port 47063 ssh2


Failed password for svc_backup from 193.27.228.114 port 42673 ssh2


Failed password for svc_backup from 193.27.228.114 port 54087 ssh2


Accepted password for svc_backup from 193.27.228.114 port 51234 ssh2


Failed password for svc_backup from 193.27.228.114 port 53894 ssh2


Failed password for svc_backup from 193.27.228.114 port 43729 ssh2


Accepted password for deploy from 10.0.4.161 port 44673 ssh2


Accepted password for guest from 10.0.1.165 port 41060 ssh2


ALLOW IN=18.52.119.26 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


Failed password for admin from 185.220.101.34 port 40922 ssh2


Failed password for admin from 185.220.101.34 port 58285 ssh2


Failed password for admin from 185.220.101.34 port 44948 ssh2


Failed password for admin from 185.220.101.34 port 45814 ssh2


Failed password for admin from 185.220.101.34 port 58819 ssh2


Failed password for admin from 185.220.101.34 port 52772 ssh2


Failed password for admin from 185.220.101.34 port 46079 ssh2


Failed password for admin from 185.220.101.34 port 46707 ssh2


Failed password for admin from 185.220.101.34 port 53736 ssh2


Failed password for admin from 185.220.101.34 port 43535 ssh2


Failed password for admin from 185.220.101.34 port 42560 ssh2


Failed password for admin from 185.220.101.34 port 46305 ssh2


Failed password for admin from 185.220.101.34 port 49782 ssh2


Failed password for admin from 185.220.101.34 port 52500 ssh2


Failed password for admin from 185.220.101.34 port 41646 ssh2


Failed password for admin from 185.220.101.34 port 40458 ssh2


Failed password for admin from 185.220.101.34 port 57896 ssh2


Failed password for admin from 185.220.101.34 port 47011 ssh2


Failed password for admin from 185.220.101.34 port 44962 ssh2


Failed password for admin from 185.220.101.34 port 52536 ssh2


Failed password for admin from 185.220.101.34 port 40393 ssh2


Failed password for admin from 185.220.101.34 port 41691 ssh2


Failed password for admin from 185.220.101.34 port 54701 ssh2


Failed password for admin from 185.220.101.34 port 54143 ssh2


Failed password for admin from 185.220.101.34 port 45565 ssh2


Failed password for guest from 22.88.118.86 port 50980 ssh2


Failed password for guest from 22.88.118.86 port 41657 ssh2


Failed password for guest from 22.88.118.86 port 59665 ssh2


Failed password for guest from 22.88.118.86 port 48601 ssh2


Failed password for guest from 22.88.118.86 port 47944 ssh2


Failed password for guest from 22.88.118.86 port 47540 ssh2


Failed password for guest from 22.88.118.86 port 57491 ssh2


Failed password for guest from 22.88.118.86 port 44492 ssh2


Failed password for guest from 22.88.118.86 port 53916 ssh2


Failed password for guest from 22.88.118.86 port 47229 ssh2


Failed password for guest from 22.88.118.86 port 54532 ssh2


Failed password for guest from 22.88.118.86 port 52907 ssh2


Failed password for guest from 22.88.118.86 port 40810 ssh2


Failed password for guest from 22.88.118.86 port 42698 ssh2


Failed password for guest from 22.88.118.86 port 54060 ssh2


Failed password for guest from 22.88.118.86 port 42188 ssh2


Failed password for postgres from 185.220.101.34 port 51729 ssh2


Failed password for postgres from 185.220.101.34 port 43973 ssh2


Failed password for postgres from 185.220.101.34 port 45691 ssh2


Failed password for postgres from 185.220.101.34 port 54163 ssh2


Failed password for postgres from 185.220.101.34 port 40571 ssh2


Failed password for postgres from 185.220.101.34 port 42439 ssh2


Failed password for postgres from 185.220.101.34 port 53421 ssh2


Failed password for postgres from 185.220.101.34 port 44307 ssh2


Failed password for postgres from 185.220.101.34 port 50352 ssh2


Failed password for postgres from 185.220.101.34 port 43942 ssh2


Failed password for postgres from 185.220.101.34 port 40303 ssh2


Failed password for postgres from 185.220.101.34 port 55014 ssh2


Failed password for postgres from 185.220.101.34 port 50302 ssh2


Failed password for postgres from 185.220.101.34 port 53451 ssh2


Failed password for postgres from 185.220.101.34 port 57578 ssh2


Failed password for postgres from 185.220.101.34 port 42397 ssh2


Failed password for postgres from 185.220.101.34 port 51949 ssh2


Failed password for postgres from 185.220.101.34 port 41361 ssh2


Failed password for postgres from 185.220.101.34 port 54174 ssh2


Failed password for postgres from 185.220.101.34 port 45041 ssh2


ALLOW IN=165.67.183.171 OUT= PROTO=TCP DPT=80


Failed password for postgres from 185.220.101.34 port 58427 ssh2


Failed password for postgres from 185.220.101.34 port 52629 ssh2


Failed password for postgres from 185.220.101.34 port 51747 ssh2


35.188.129.129 - - "GET / HTTP/1.1" 200 5170


47.42.48.144 - - "GET /login HTTP/1.1" 200 1901


185.220.101.34 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 200 318


OUTBOUND src=10.0.0.184 dst=185.220.101.34 bytes=3357540352 proto=TCP dport=443 duration=206s


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/passwd root


CONN src=10.0.5.26 dst=45.137.21.9 dport=443 bytes=372 interval=300s


ALLOW IN=48.104.83.193 OUT= PROTO=TCP DPT=443


CONN src=10.0.5.26 dst=45.137.21.9 dport=443 bytes=688 interval=300s


CONN src=10.0.5.26 dst=45.137.21.9 dport=443 bytes=366 interval=300s


Accepted password for root from 10.0.0.9 port 48022 ssh2


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


CONN src=10.0.5.26 dst=45.137.21.9 dport=443 bytes=201 interval=300s


CONN src=10.0.5.26 dst=45.137.21.9 dport=443 bytes=255 interval=300s


CONN src=10.0.5.26 dst=45.137.21.9 dport=443 bytes=381 interval=300s


220.101.40.250 - - "GET /health HTTP/1.1" 200 6462


ALLOW IN=130.29.177.2 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.0.250 port 44495 ssh2


Accepted password for www-data from 10.0.0.252 port 56461 ssh2


OUTBOUND src=10.0.0.5 dst=209.141.56.12 bytes=6912212992 proto=TCP dport=443 duration=317s


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=496 interval=300s


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=499 interval=300s


ALLOW IN=186.183.239.91 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.4.163 port 46061 ssh2


192.232.78.218 - - "GET /static/app.js HTTP/1.1" 200 1065


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 489


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=467 interval=300s


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


ALLOW IN=182.169.60.73 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.1.73 port 52297 ssh2


32.211.230.68 - - "GET /api/orders?page=2 HTTP/1.1" 200 549


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=363 interval=300s


ALLOW IN=102.30.5.41 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.3.210 port 54161 ssh2


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=287 interval=300s


Accepted password for guest from 10.0.5.149 port 58514 ssh2


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=758 interval=300s


193.27.228.114 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 500 405


196.182.66.180 - - "GET /api/orders?page=2 HTTP/1.1" 200 997


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=351 interval=300s


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=814 interval=300s


Failed password for svc_backup from 45.137.21.9 port 48597 ssh2


Failed password for svc_backup from 45.137.21.9 port 58383 ssh2


Failed password for svc_backup from 45.137.21.9 port 42547 ssh2


Failed password for svc_backup from 45.137.21.9 port 53340 ssh2


Failed password for svc_backup from 45.137.21.9 port 42005 ssh2


Failed password for svc_backup from 45.137.21.9 port 53179 ssh2


Failed password for svc_backup from 45.137.21.9 port 53155 ssh2


Failed password for svc_backup from 45.137.21.9 port 58935 ssh2


Failed password for svc_backup from 45.137.21.9 port 54509 ssh2


Failed password for svc_backup from 45.137.21.9 port 46748 ssh2


Failed password for svc_backup from 45.137.21.9 port 56677 ssh2


Failed password for svc_backup from 45.137.21.9 port 47647 ssh2


Failed password for svc_backup from 45.137.21.9 port 46280 ssh2


Failed password for svc_backup from 45.137.21.9 port 40485 ssh2


Failed password for svc_backup from 45.137.21.9 port 43932 ssh2


Failed password for svc_backup from 45.137.21.9 port 59049 ssh2


Failed password for svc_backup from 45.137.21.9 port 50579 ssh2


Failed password for svc_backup from 45.137.21.9 port 42624 ssh2


Failed password for svc_backup from 45.137.21.9 port 42963 ssh2


Failed password for svc_backup from 45.137.21.9 port 58567 ssh2


Failed password for svc_backup from 45.137.21.9 port 45234 ssh2


Failed password for svc_backup from 45.137.21.9 port 45043 ssh2


ALLOW IN=42.202.113.207 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=884 interval=300s


ALLOW IN=68.230.135.77 OUT= PROTO=TCP DPT=80


Failed password for somchai from 202.29.88.72 port 41836 ssh2


Failed password for somchai from 202.29.88.72 port 45670 ssh2


Failed password for somchai from 202.29.88.72 port 59061 ssh2


Failed password for somchai from 202.29.88.72 port 40951 ssh2


Failed password for somchai from 202.29.88.72 port 48875 ssh2


Failed password for somchai from 202.29.88.72 port 45591 ssh2


Failed password for somchai from 202.29.88.72 port 44163 ssh2


Failed password for somchai from 202.29.88.72 port 48464 ssh2


Failed password for somchai from 202.29.88.72 port 54883 ssh2


Failed password for somchai from 202.29.88.72 port 44338 ssh2


Failed password for somchai from 202.29.88.72 port 42231 ssh2


Failed password for somchai from 202.29.88.72 port 44319 ssh2


Failed password for somchai from 202.29.88.72 port 49699 ssh2


Failed password for somchai from 202.29.88.72 port 41707 ssh2


Failed password for somchai from 202.29.88.72 port 41916 ssh2


Failed password for somchai from 202.29.88.72 port 40536 ssh2


Failed password for somchai from 202.29.88.72 port 53552 ssh2


Failed password for somchai from 202.29.88.72 port 57906 ssh2


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


Failed password for somchai from 202.29.88.72 port 45342 ssh2


CONN src=10.0.5.31 dst=91.219.236.18 dport=443 bytes=790 interval=300s


45.137.21.9 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 182


ALLOW IN=27.160.92.32 OUT= PROTO=TCP DPT=443


ALLOW IN=215.154.138.176 OUT= PROTO=TCP DPT=443


Accepted password for www-data from 10.0.1.87 port 42680 ssh2


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 427


145.181.66.158 - - "GET /static/app.js HTTP/1.1" 200 4266


157.199.165.147 - - "GET / HTTP/1.1" 200 6821


CONN src=10.0.1.231 dst=45.137.21.9 dport=443 bytes=711 interval=60s


ALLOW IN=221.99.22.80 OUT= PROTO=TCP DPT=80


70.137.94.116 - - "GET /dashboard HTTP/1.1" 200 4084


CONN src=10.0.1.231 dst=45.137.21.9 dport=443 bytes=524 interval=60s


CONN src=10.0.1.231 dst=45.137.21.9 dport=443 bytes=316 interval=60s


CONN src=10.0.1.231 dst=45.137.21.9 dport=443 bytes=890 interval=60s


CONN src=10.0.1.231 dst=45.137.21.9 dport=443 bytes=616 interval=60s


CONN src=10.0.1.231 dst=45.137.21.9 dport=443 bytes=469 interval=60s


ALLOW IN=167.33.211.217 OUT= PROTO=TCP DPT=443


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=553 interval=300s


ALLOW IN=67.94.34.202 OUT= PROTO=TCP DPT=80


ALLOW IN=148.54.69.83 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=585 interval=300s


ALLOW IN=108.207.195.112 OUT= PROTO=TCP DPT=80


ALLOW IN=66.229.141.103 OUT= PROTO=TCP DPT=443


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=324 interval=300s


Accepted password for www-data from 10.0.4.191 port 49805 ssh2


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=394 interval=300s


Failed password for www-data from 116.155.226.191 port 46158 ssh2


Failed password for www-data from 116.155.226.191 port 44310 ssh2


Failed password for www-data from 116.155.226.191 port 40858 ssh2


Failed password for www-data from 116.155.226.191 port 40854 ssh2


Failed password for www-data from 116.155.226.191 port 48744 ssh2


Failed password for www-data from 116.155.226.191 port 56460 ssh2


Failed password for www-data from 116.155.226.191 port 58580 ssh2


Failed password for www-data from 116.155.226.191 port 52696 ssh2


Failed password for www-data from 116.155.226.191 port 47566 ssh2


Failed password for www-data from 116.155.226.191 port 45366 ssh2


Failed password for www-data from 116.155.226.191 port 42604 ssh2


Failed password for www-data from 116.155.226.191 port 47608 ssh2


Failed password for www-data from 116.155.226.191 port 55617 ssh2


Failed password for www-data from 116.155.226.191 port 55527 ssh2


Accepted password for www-data from 116.155.226.191 port 51234 ssh2


Failed password for www-data from 116.155.226.191 port 55360 ssh2


Failed password for www-data from 116.155.226.191 port 52253 ssh2


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/bin/bash


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=423 interval=300s


ALLOW IN=40.177.203.181 OUT= PROTO=TCP DPT=80


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=658 interval=300s


ALLOW IN=99.204.66.195 OUT= PROTO=TCP DPT=443


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=276 interval=300s


ALLOW IN=40.224.50.171 OUT= PROTO=TCP DPT=443


193.27.228.114 - - "GET /api/products?id=1' AND SLEEP(5)-- HTTP/1.1" 403 141


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


Failed password for admin from 45.137.21.9 port 49725 ssh2


Failed password for admin from 45.137.21.9 port 44760 ssh2


Failed password for admin from 45.137.21.9 port 57301 ssh2


Failed password for admin from 45.137.21.9 port 41050 ssh2


Failed password for admin from 45.137.21.9 port 48893 ssh2


Failed password for admin from 45.137.21.9 port 52974 ssh2


Failed password for admin from 45.137.21.9 port 41131 ssh2


Failed password for admin from 45.137.21.9 port 57312 ssh2


Failed password for admin from 45.137.21.9 port 50843 ssh2


Failed password for admin from 45.137.21.9 port 50356 ssh2


Failed password for admin from 45.137.21.9 port 41635 ssh2


Failed password for admin from 45.137.21.9 port 48685 ssh2


Failed password for admin from 45.137.21.9 port 49320 ssh2


Failed password for admin from 45.137.21.9 port 42255 ssh2


Failed password for admin from 45.137.21.9 port 43616 ssh2


Failed password for admin from 45.137.21.9 port 49987 ssh2


Failed password for admin from 45.137.21.9 port 40804 ssh2


Failed password for admin from 45.137.21.9 port 42123 ssh2


Failed password for admin from 45.137.21.9 port 51961 ssh2


Accepted password for admin from 45.137.21.9 port 51234 ssh2


Failed password for admin from 45.137.21.9 port 56528 ssh2


Failed password for admin from 45.137.21.9 port 47253 ssh2


Failed password for admin from 45.137.21.9 port 48120 ssh2


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=883 interval=300s


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=204.179.57.220 OUT= PROTO=TCP DPT=80 FLAGS=SYN


CONN src=10.0.3.128 dst=193.27.228.114 dport=443 bytes=758 interval=300s


Accepted password for somchai from 10.0.0.207 port 56185 ssh2


ALLOW IN=65.51.89.197 OUT= PROTO=TCP DPT=80


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=45.137.21.9 OUT= PROTO=TCP DPT=53 FLAGS=SYN


Accepted password for nattapong from 10.0.1.254 port 57080 ssh2


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=817 interval=30s


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=706 interval=30s


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=216 interval=30s


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=836 interval=30s


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=804 interval=30s


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=627 interval=30s


CONN src=10.0.5.204 dst=185.220.101.34 dport=443 bytes=373 interval=30s


Accepted password for svc_backup from 10.0.2.178 port 51209 ssh2


Accepted password for deploy from 10.0.3.200 port 45806 ssh2


178.190.138.181 - - "GET /dashboard HTTP/1.1" 200 4526


53.141.172.8 - - "GET / HTTP/1.1" 200 6470


ALLOW IN=109.214.127.71 OUT= PROTO=TCP DPT=443


45.137.21.9 - - "GET /api/products?id=UNION SELECT username,password FROM users-- HTTP/1.1" 200 222


193.27.228.114 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 295


66.21.77.152 - - "GET /api/products HTTP/1.1" 200 2787


ALLOW IN=24.154.251.203 OUT= PROTO=TCP DPT=443


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


213.95.183.63 - - "GET / HTTP/1.1" 200 1962


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


ALLOW IN=117.212.246.202 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.3.92 port 50463 ssh2


Accepted password for admin from 10.0.4.245 port 59735 ssh2


ALLOW IN=112.108.196.182 OUT= PROTO=TCP DPT=443


OUTBOUND src=10.0.2.139 dst=193.27.228.114 bytes=8016363520 proto=TCP dport=443 duration=366s


Failed password for deploy from 185.220.101.34 port 45379 ssh2


Failed password for deploy from 185.220.101.34 port 53624 ssh2


Failed password for deploy from 185.220.101.34 port 55954 ssh2


Failed password for deploy from 185.220.101.34 port 44598 ssh2


Failed password for deploy from 185.220.101.34 port 56802 ssh2


Failed password for deploy from 185.220.101.34 port 44855 ssh2


Failed password for root from 45.137.21.9 port 42376 ssh2


Failed password for deploy from 185.220.101.34 port 51820 ssh2


Failed password for root from 45.137.21.9 port 52962 ssh2


Failed password for deploy from 185.220.101.34 port 46627 ssh2


Failed password for root from 45.137.21.9 port 54315 ssh2


Failed password for root from 45.137.21.9 port 43310 ssh2


Failed password for root from 45.137.21.9 port 49888 ssh2


Failed password for root from 45.137.21.9 port 44471 ssh2


Failed password for root from 45.137.21.9 port 58414 ssh2


Failed password for deploy from 185.220.101.34 port 56231 ssh2


Failed password for deploy from 185.220.101.34 port 41259 ssh2


Failed password for root from 45.137.21.9 port 59298 ssh2


Failed password for root from 45.137.21.9 port 52398 ssh2


Failed password for root from 45.137.21.9 port 45823 ssh2


Failed password for deploy from 185.220.101.34 port 45915 ssh2


Failed password for root from 45.137.21.9 port 45966 ssh2


Failed password for root from 45.137.21.9 port 55964 ssh2


Failed password for root from 45.137.21.9 port 50396 ssh2


Failed password for root from 45.137.21.9 port 56258 ssh2


Failed password for root from 45.137.21.9 port 50851 ssh2


Failed password for deploy from 185.220.101.34 port 51238 ssh2


Failed password for root from 45.137.21.9 port 49650 ssh2


Failed password for deploy from 185.220.101.34 port 52223 ssh2


Failed password for root from 45.137.21.9 port 51692 ssh2


Failed password for root from 45.137.21.9 port 58595 ssh2


Failed password for root from 45.137.21.9 port 40058 ssh2


Failed password for root from 45.137.21.9 port 58770 ssh2


Accepted password for root from 45.137.21.9 port 51234 ssh2


Failed password for root from 45.137.21.9 port 50427 ssh2


Failed password for root from 45.137.21.9 port 47238 ssh2


Failed password for root from 45.137.21.9 port 58531 ssh2


Failed password for root from 45.137.21.9 port 42549 ssh2


ALLOW IN=87.37.3.45 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.3.172 port 49975 ssh2


Failed password for guest from 91.219.236.18 port 57746 ssh2


Failed password for guest from 91.219.236.18 port 40121 ssh2


Failed password for guest from 91.219.236.18 port 46597 ssh2


Failed password for guest from 91.219.236.18 port 57793 ssh2


Failed password for guest from 91.219.236.18 port 54574 ssh2


Failed password for guest from 91.219.236.18 port 58806 ssh2


Failed password for guest from 91.219.236.18 port 53670 ssh2


Failed password for guest from 91.219.236.18 port 43910 ssh2


Failed password for guest from 91.219.236.18 port 52589 ssh2


Failed password for guest from 91.219.236.18 port 43242 ssh2


Failed password for guest from 91.219.236.18 port 44338 ssh2


Failed password for guest from 91.219.236.18 port 50572 ssh2


Failed password for guest from 91.219.236.18 port 50441 ssh2


Failed password for guest from 91.219.236.18 port 54733 ssh2


116.220.165.156 - - "GET /login HTTP/1.1" 200 4813


209.141.56.12 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 309


77.26.145.46 - - "GET /api/orders?page=2 HTTP/1.1" 200 2236


167.132.95.141 - - "GET /api/products HTTP/1.1" 200 2142


91.219.236.18 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 403 219


Failed password for postgres from 45.137.21.9 port 58760 ssh2


Failed password for postgres from 45.137.21.9 port 59255 ssh2


Failed password for postgres from 45.137.21.9 port 40784 ssh2


Failed password for postgres from 45.137.21.9 port 46101 ssh2


Failed password for postgres from 45.137.21.9 port 53871 ssh2


Failed password for postgres from 45.137.21.9 port 52181 ssh2


Failed password for postgres from 45.137.21.9 port 51849 ssh2


Failed password for postgres from 45.137.21.9 port 46773 ssh2


Failed password for postgres from 45.137.21.9 port 41103 ssh2


Failed password for postgres from 45.137.21.9 port 40166 ssh2


Failed password for postgres from 45.137.21.9 port 59891 ssh2


Failed password for postgres from 45.137.21.9 port 40698 ssh2


Failed password for postgres from 45.137.21.9 port 51738 ssh2


Failed password for postgres from 45.137.21.9 port 51215 ssh2


Failed password for postgres from 45.137.21.9 port 40961 ssh2


Failed password for postgres from 45.137.21.9 port 51574 ssh2


Failed password for postgres from 45.137.21.9 port 41772 ssh2


Failed password for postgres from 45.137.21.9 port 46417 ssh2


Failed password for postgres from 45.137.21.9 port 41237 ssh2


Failed password for postgres from 45.137.21.9 port 51554 ssh2


Failed password for postgres from 45.137.21.9 port 40105 ssh2


Failed password for postgres from 45.137.21.9 port 53179 ssh2


Failed password for postgres from 45.137.21.9 port 59570 ssh2


Accepted password for postgres from 45.137.21.9 port 51234 ssh2


Failed password for postgres from 45.137.21.9 port 45411 ssh2


Accepted password for admin from 10.0.2.60 port 43213 ssh2


Failed password for postgres from 45.137.21.9 port 59436 ssh2


196.134.107.164 - - "GET /health HTTP/1.1" 200 2706


ALLOW IN=70.160.243.202 OUT= PROTO=TCP DPT=443


211.47.141.79 - - "GET /dashboard HTTP/1.1" 200 7949


ALLOW IN=114.28.2.43 OUT= PROTO=TCP DPT=80


ALLOW IN=195.160.97.196 OUT= PROTO=TCP DPT=80


135.2.118.154 - - "GET /api/orders?page=2 HTTP/1.1" 200 2144


Accepted password for admin from 10.0.1.188 port 45685 ssh2


ALLOW IN=51.44.201.174 OUT= PROTO=TCP DPT=443


141.211.115.250 - - "GET /login HTTP/1.1" 200 2971


Failed password for nattapong from 78.232.198.27 port 49639 ssh2


Failed password for nattapong from 78.232.198.27 port 58166 ssh2


Failed password for nattapong from 78.232.198.27 port 59175 ssh2


Failed password for nattapong from 78.232.198.27 port 48365 ssh2


Failed password for nattapong from 78.232.198.27 port 43772 ssh2


Failed password for nattapong from 78.232.198.27 port 47776 ssh2


Failed password for nattapong from 78.232.198.27 port 50660 ssh2


Failed password for nattapong from 78.232.198.27 port 40997 ssh2


Failed password for nattapong from 78.232.198.27 port 53343 ssh2


Failed password for nattapong from 78.232.198.27 port 58746 ssh2


Failed password for nattapong from 78.232.198.27 port 40876 ssh2


Failed password for nattapong from 78.232.198.27 port 53532 ssh2


Failed password for nattapong from 78.232.198.27 port 49518 ssh2


Failed password for nattapong from 78.232.198.27 port 51544 ssh2


Failed password for nattapong from 78.232.198.27 port 50899 ssh2


Accepted password for nattapong from 78.232.198.27 port 51234 ssh2


Failed password for nattapong from 78.232.198.27 port 51832 ssh2


Failed password for nattapong from 78.232.198.27 port 46892 ssh2


Failed password for nattapong from 78.232.198.27 port 56737 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Accepted password for deploy from 10.0.4.205 port 50536 ssh2


ALLOW IN=33.185.170.200 OUT= PROTO=TCP DPT=443


ALLOW IN=164.23.198.121 OUT= PROTO=TCP DPT=80


ALLOW IN=131.164.81.24 OUT= PROTO=TCP DPT=443


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/bin/bash


23.114.193.104 - - "GET /health HTTP/1.1" 200 2125


Accepted password for admin from 10.0.0.190 port 41046 ssh2


ALLOW IN=60.65.164.201 OUT= PROTO=TCP DPT=80


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=506 interval=60s


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=628 interval=60s


Accepted password for oppa from 10.0.5.52 port 55705 ssh2


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=536 interval=60s


ALLOW IN=35.21.117.55 OUT= PROTO=TCP DPT=443


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=366 interval=60s


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=307 interval=60s


197.113.64.169 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 130


39.79.39.51 - - "GET /dashboard HTTP/1.1" 200 4183


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=665 interval=60s


Accepted password for www-data from 10.0.5.45 port 41745 ssh2


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=243 interval=60s


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=707 interval=60s


CONN src=10.0.4.248 dst=209.141.56.12 dport=443 bytes=424 interval=60s


122.176.44.142 - - "GET /login HTTP/1.1" 200 3824


49.215.233.241 - - "GET /login HTTP/1.1" 200 7525


Failed password for admin from 91.219.236.18 port 55545 ssh2


Failed password for admin from 91.219.236.18 port 51249 ssh2


Failed password for admin from 91.219.236.18 port 43141 ssh2


Failed password for admin from 91.219.236.18 port 54102 ssh2


Failed password for admin from 91.219.236.18 port 51637 ssh2


Failed password for admin from 91.219.236.18 port 46047 ssh2


Failed password for admin from 91.219.236.18 port 47426 ssh2


Failed password for admin from 91.219.236.18 port 56373 ssh2


Failed password for admin from 91.219.236.18 port 57166 ssh2


Failed password for admin from 91.219.236.18 port 53153 ssh2


Failed password for admin from 91.219.236.18 port 45521 ssh2


Failed password for admin from 91.219.236.18 port 57338 ssh2


Failed password for admin from 91.219.236.18 port 42672 ssh2


Failed password for admin from 91.219.236.18 port 40152 ssh2


Failed password for admin from 91.219.236.18 port 54802 ssh2


Failed password for admin from 91.219.236.18 port 40668 ssh2


Failed password for admin from 91.219.236.18 port 52607 ssh2


Failed password for admin from 91.219.236.18 port 41995 ssh2


Failed password for admin from 91.219.236.18 port 41938 ssh2


Failed password for admin from 91.219.236.18 port 52227 ssh2


47.6.242.110 - - "GET /api/products HTTP/1.1" 200 370


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


ALLOW IN=75.236.232.220 OUT= PROTO=TCP DPT=80


sudo: guest : TTY=pts/0 ; PWD=/home/guest ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


Accepted password for oppa from 10.0.4.54 port 42248 ssh2


ALLOW IN=14.13.236.56 OUT= PROTO=TCP DPT=443


ALLOW IN=214.121.37.199 OUT= PROTO=TCP DPT=443


154.108.5.164 - - "GET /login HTTP/1.1" 200 5852


190.178.28.198 - - "GET /api/orders?page=2 HTTP/1.1" 200 7653


ALLOW IN=166.177.117.237 OUT= PROTO=TCP DPT=80


178.88.50.99 - - "GET /static/app.js HTTP/1.1" 200 5550


74.55.242.62 - - "GET /api/products HTTP/1.1" 200 7019


Failed password for oppa from 193.27.228.114 port 42269 ssh2


Failed password for oppa from 193.27.228.114 port 40770 ssh2


Failed password for oppa from 193.27.228.114 port 55934 ssh2


Failed password for oppa from 193.27.228.114 port 48922 ssh2


Failed password for oppa from 193.27.228.114 port 41636 ssh2


Failed password for oppa from 193.27.228.114 port 58449 ssh2


Failed password for oppa from 193.27.228.114 port 44596 ssh2


Failed password for oppa from 193.27.228.114 port 55726 ssh2


Failed password for oppa from 193.27.228.114 port 54945 ssh2


Failed password for oppa from 193.27.228.114 port 58391 ssh2


Failed password for oppa from 193.27.228.114 port 52964 ssh2


Accepted password for guest from 10.0.0.168 port 55679 ssh2


ALLOW IN=184.210.142.68 OUT= PROTO=TCP DPT=443


ALLOW IN=125.53.135.104 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.3.186 port 44441 ssh2


ALLOW IN=187.171.9.173 OUT= PROTO=TCP DPT=443


Failed password for oppa from 91.219.236.18 port 55371 ssh2


Failed password for oppa from 91.219.236.18 port 40172 ssh2


Failed password for oppa from 91.219.236.18 port 40622 ssh2


Failed password for oppa from 91.219.236.18 port 57983 ssh2


Failed password for oppa from 91.219.236.18 port 47066 ssh2


Failed password for oppa from 91.219.236.18 port 49440 ssh2


Failed password for oppa from 91.219.236.18 port 49868 ssh2


Failed password for oppa from 91.219.236.18 port 41564 ssh2


Failed password for oppa from 91.219.236.18 port 53756 ssh2


Failed password for oppa from 91.219.236.18 port 59951 ssh2


Failed password for oppa from 91.219.236.18 port 53869 ssh2


Accepted password for oppa from 91.219.236.18 port 51234 ssh2


Failed password for oppa from 91.219.236.18 port 54978 ssh2


31.186.203.41 - - "GET /login HTTP/1.1" 200 4824


ALLOW IN=25.186.26.29 OUT= PROTO=TCP DPT=443


Accepted password for oppa from 10.0.3.111 port 52226 ssh2


ALLOW IN=23.138.176.205 OUT= PROTO=TCP DPT=80


ALLOW IN=121.129.182.42 OUT= PROTO=TCP DPT=443


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=564 interval=60s


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=837 interval=60s


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=544 interval=60s


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=572 interval=60s


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=645 interval=60s


Accepted password for somchai from 10.0.1.183 port 41132 ssh2


Accepted password for postgres from 10.0.4.146 port 44866 ssh2


Accepted password for guest from 10.0.3.50 port 43157 ssh2


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=391 interval=60s


CONN src=10.0.1.204 dst=209.141.56.12 dport=443 bytes=325 interval=60s


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=53.165.89.194 OUT= PROTO=TCP DPT=25 FLAGS=SYN


Accepted password for root from 10.0.3.23 port 45230 ssh2


ALLOW IN=184.241.1.143 OUT= PROTO=TCP DPT=443


179.199.229.242 - - "GET / HTTP/1.1" 200 5678


184.242.178.194 - - "GET /dashboard HTTP/1.1" 200 3403


OUTBOUND src=10.0.3.249 dst=185.220.101.34 bytes=6739197952 proto=TCP dport=443 duration=562s


ALLOW IN=21.14.41.12 OUT= PROTO=TCP DPT=443


ALLOW IN=164.149.183.47 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.2.179 port 54330 ssh2


Accepted password for nattapong from 10.0.5.15 port 40670 ssh2


ALLOW IN=144.48.221.170 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.1.63 port 56081 ssh2


ALLOW IN=124.25.66.8 OUT= PROTO=TCP DPT=443


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/bin/su -


Accepted password for nattapong from 10.0.0.3 port 42399 ssh2


ALLOW IN=123.97.1.95 OUT= PROTO=TCP DPT=443


Failed password for root from 91.219.236.18 port 40868 ssh2


Failed password for root from 91.219.236.18 port 45246 ssh2


Failed password for root from 91.219.236.18 port 53329 ssh2


Failed password for root from 91.219.236.18 port 42835 ssh2


Failed password for root from 91.219.236.18 port 57938 ssh2


Failed password for root from 91.219.236.18 port 44326 ssh2


Failed password for root from 91.219.236.18 port 50523 ssh2


Failed password for root from 91.219.236.18 port 42269 ssh2


Failed password for root from 91.219.236.18 port 42430 ssh2


Failed password for root from 91.219.236.18 port 41961 ssh2


ALLOW IN=160.252.117.183 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.4.114 port 40647 ssh2


194.148.221.71 - - "GET / HTTP/1.1" 200 7436


OUTBOUND src=10.0.0.182 dst=193.27.228.114 bytes=1254096896 proto=TCP dport=443 duration=479s


Accepted password for root from 10.0.2.101 port 42315 ssh2


194.143.252.17 - - "GET /static/app.js HTTP/1.1" 200 6261


24.220.93.112 - - "GET /static/app.js HTTP/1.1" 200 1091


ALLOW IN=215.34.168.232 OUT= PROTO=TCP DPT=443


Failed password for admin from 185.220.101.34 port 49615 ssh2


Failed password for admin from 185.220.101.34 port 43492 ssh2


Failed password for admin from 185.220.101.34 port 49837 ssh2


Failed password for admin from 185.220.101.34 port 44486 ssh2


Failed password for admin from 185.220.101.34 port 56327 ssh2


Failed password for admin from 185.220.101.34 port 45014 ssh2


Failed password for admin from 185.220.101.34 port 48463 ssh2


Failed password for admin from 185.220.101.34 port 51139 ssh2


Failed password for admin from 185.220.101.34 port 49343 ssh2


Failed password for admin from 185.220.101.34 port 42437 ssh2


Failed password for admin from 185.220.101.34 port 57201 ssh2


Failed password for admin from 185.220.101.34 port 51879 ssh2


Failed password for admin from 185.220.101.34 port 43118 ssh2


Failed password for admin from 185.220.101.34 port 49824 ssh2


Failed password for admin from 185.220.101.34 port 58887 ssh2


Failed password for admin from 185.220.101.34 port 40744 ssh2


Failed password for admin from 185.220.101.34 port 59078 ssh2


Failed password for admin from 185.220.101.34 port 47586 ssh2


Failed password for admin from 185.220.101.34 port 51920 ssh2


Failed password for admin from 185.220.101.34 port 49060 ssh2


Failed password for admin from 185.220.101.34 port 46054 ssh2


126.178.205.54 - - "GET /api/products HTTP/1.1" 200 3182


Failed password for admin from 185.220.101.34 port 50937 ssh2


Failed password for admin from 185.220.101.34 port 44054 ssh2


Failed password for admin from 185.220.101.34 port 43049 ssh2


Failed password for admin from 185.220.101.34 port 59645 ssh2


52.247.26.117 - - "GET /static/app.js HTTP/1.1" 200 6585


Failed password for postgres from 185.220.101.34 port 43996 ssh2


Failed password for postgres from 185.220.101.34 port 44545 ssh2


Failed password for postgres from 185.220.101.34 port 42659 ssh2


Failed password for postgres from 185.220.101.34 port 43004 ssh2


Failed password for postgres from 185.220.101.34 port 54187 ssh2


Failed password for postgres from 185.220.101.34 port 41638 ssh2


Failed password for postgres from 185.220.101.34 port 43001 ssh2


Failed password for postgres from 185.220.101.34 port 47637 ssh2


Failed password for postgres from 185.220.101.34 port 50499 ssh2


Accepted password for postgres from 185.220.101.34 port 51234 ssh2


Failed password for postgres from 185.220.101.34 port 42602 ssh2


Failed password for postgres from 185.220.101.34 port 57345 ssh2


35.219.176.254 - - "GET /api/products HTTP/1.1" 200 3574


Accepted password for svc_backup from 10.0.5.195 port 46010 ssh2


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/usr/bin/cat /etc/shadow


90.255.190.119 - - "GET /api/orders?page=2 HTTP/1.1" 200 6683


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


162.16.18.171 - - "GET /static/app.js HTTP/1.1" 200 5001


ALLOW IN=143.32.128.162 OUT= PROTO=TCP DPT=443


170.236.253.43 - - "GET /static/app.js HTTP/1.1" 200 7302


Failed password for deploy from 91.219.236.18 port 40542 ssh2


Failed password for deploy from 91.219.236.18 port 57128 ssh2


Failed password for deploy from 91.219.236.18 port 59841 ssh2


Failed password for deploy from 91.219.236.18 port 45813 ssh2


Failed password for deploy from 91.219.236.18 port 53755 ssh2


Failed password for deploy from 91.219.236.18 port 57413 ssh2


Failed password for deploy from 91.219.236.18 port 55802 ssh2


Failed password for deploy from 91.219.236.18 port 59654 ssh2


Failed password for deploy from 91.219.236.18 port 54139 ssh2


Failed password for deploy from 91.219.236.18 port 43850 ssh2


Failed password for deploy from 91.219.236.18 port 44270 ssh2


Failed password for deploy from 91.219.236.18 port 57671 ssh2


Accepted password for www-data from 10.0.1.231 port 55429 ssh2


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=22 FLAGS=SYN


ALLOW IN=176.167.248.152 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.0.249 port 40392 ssh2


ALLOW IN=201.224.127.51 OUT= PROTO=TCP DPT=80


58.255.217.54 - - "GET /dashboard HTTP/1.1" 200 5940


111.144.130.235 - - "GET /static/app.js HTTP/1.1" 200 6136


DROP IN=185.220.101.34 OUT= PROTO=TCP DPT=25 FLAGS=SYN


178.118.152.197 - - "GET /dashboard HTTP/1.1" 200 7002


Accepted password for www-data from 10.0.5.150 port 57577 ssh2


Accepted password for admin from 10.0.1.234 port 55204 ssh2


sudo: deploy : TTY=pts/0 ; PWD=/home/deploy ; USER=root ; COMMAND=/usr/bin/passwd root


74.141.228.201 - - "GET / HTTP/1.1" 200 2858


110.58.95.117 - - "GET /dashboard HTTP/1.1" 200 4283


211.190.156.179 - - "GET /health HTTP/1.1" 200 370


115.60.72.231 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 403 15


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=25.253.232.89 OUT= PROTO=TCP DPT=53 FLAGS=SYN


210.171.100.129 - - "GET /health HTTP/1.1" 200 3384


139.231.29.229 - - "GET /static/app.js HTTP/1.1" 200 2685


Accepted password for root from 10.0.0.81 port 59781 ssh2


77.139.213.226 - - "GET / HTTP/1.1" 200 3026


209.141.56.12 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 191


107.213.212.33 - - "GET /health HTTP/1.1" 200 779


ALLOW IN=143.132.85.96 OUT= PROTO=TCP DPT=80


Accepted password for admin from 10.0.3.76 port 48064 ssh2


ALLOW IN=191.188.245.63 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.2.174 port 48815 ssh2


Accepted password for admin from 10.0.1.181 port 59527 ssh2


Accepted password for postgres from 10.0.2.238 port 48602 ssh2


OUTBOUND src=10.0.1.220 dst=185.220.101.34 bytes=4824498176 proto=TCP dport=443 duration=307s


ALLOW IN=184.15.20.195 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.180 dst=193.27.228.114 dport=443 bytes=598 interval=30s


CONN src=10.0.5.180 dst=193.27.228.114 dport=443 bytes=427 interval=30s


ALLOW IN=169.206.34.12 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.180 dst=193.27.228.114 dport=443 bytes=399 interval=30s


CONN src=10.0.5.180 dst=193.27.228.114 dport=443 bytes=631 interval=30s


CONN src=10.0.5.180 dst=193.27.228.114 dport=443 bytes=323 interval=30s


109.174.38.176 - - "GET /login HTTP/1.1" 200 7029


ALLOW IN=145.199.32.45 OUT= PROTO=TCP DPT=80


130.238.55.22 - - "GET /login HTTP/1.1" 200 6194


Accepted password for somchai from 10.0.2.74 port 45169 ssh2


sudo: nattapong : TTY=pts/0 ; PWD=/home/nattapong ; USER=root ; COMMAND=/bin/bash


197.75.120.27 - - "GET /login HTTP/1.1" 200 2296


178.200.66.153 - - "GET /api/orders?page=2 HTTP/1.1" 200 7884


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 311


Accepted password for deploy from 10.0.2.219 port 52958 ssh2


OUTBOUND src=10.0.3.234 dst=91.219.236.18 bytes=7570718720 proto=TCP dport=443 duration=465s


ALLOW IN=118.126.163.230 OUT= PROTO=TCP DPT=80


ALLOW IN=175.30.46.30 OUT= PROTO=TCP DPT=443


Accepted password for admin from 10.0.1.218 port 49089 ssh2


Accepted password for postgres from 10.0.0.121 port 56785 ssh2


Accepted password for root from 10.0.1.134 port 49221 ssh2


44.67.233.13 - - "GET /api/orders?page=2 HTTP/1.1" 200 1848


Accepted password for oppa from 10.0.5.141 port 56001 ssh2


Failed password for guest from 91.219.236.18 port 43488 ssh2


Failed password for guest from 91.219.236.18 port 52480 ssh2


Failed password for guest from 91.219.236.18 port 41738 ssh2


Failed password for guest from 91.219.236.18 port 48748 ssh2


Failed password for guest from 91.219.236.18 port 49391 ssh2


Failed password for guest from 91.219.236.18 port 42032 ssh2


Failed password for guest from 91.219.236.18 port 41854 ssh2


Failed password for guest from 91.219.236.18 port 48210 ssh2


220.91.212.27 - - "GET /dashboard HTTP/1.1" 200 5088


ALLOW IN=122.140.29.20 OUT= PROTO=TCP DPT=443


Accepted password for somchai from 10.0.1.182 port 44895 ssh2


135.246.3.129 - - "GET /login HTTP/1.1" 200 3803


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


81.127.148.231 - - "GET /login HTTP/1.1" 200 3308


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


185.220.101.34 - - "GET /search?q=<img src=x onerror=alert(document.cookie)> HTTP/1.1" 200 306


Failed password for admin from 185.220.101.34 port 53816 ssh2


Failed password for admin from 185.220.101.34 port 49274 ssh2


Failed password for admin from 185.220.101.34 port 48677 ssh2


Failed password for admin from 185.220.101.34 port 52331 ssh2


Failed password for admin from 185.220.101.34 port 57917 ssh2


Failed password for admin from 185.220.101.34 port 48704 ssh2


Failed password for admin from 185.220.101.34 port 56767 ssh2


Failed password for admin from 185.220.101.34 port 54067 ssh2


Failed password for admin from 185.220.101.34 port 44970 ssh2


Accepted password for admin from 185.220.101.34 port 51234 ssh2


38.68.205.196 - - "GET /health HTTP/1.1" 200 3326


217.68.112.132 - - "GET /static/app.js HTTP/1.1" 200 4231


65.77.203.129 - - "GET /dashboard HTTP/1.1" 200 4360


ALLOW IN=35.252.121.248 OUT= PROTO=TCP DPT=80


160.255.187.116 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 119


ALLOW IN=215.149.191.180 OUT= PROTO=TCP DPT=80


83.198.219.148 - - "GET /api/products HTTP/1.1" 200 2605


ALLOW IN=50.36.70.97 OUT= PROTO=TCP DPT=443


sudo: somchai : TTY=pts/0 ; PWD=/home/somchai ; USER=root ; COMMAND=/usr/bin/passwd root


Failed password for svc_backup from 209.141.56.12 port 47037 ssh2


Failed password for svc_backup from 209.141.56.12 port 57019 ssh2


Failed password for svc_backup from 209.141.56.12 port 47707 ssh2


Failed password for svc_backup from 209.141.56.12 port 57950 ssh2


Failed password for svc_backup from 209.141.56.12 port 56240 ssh2


Failed password for svc_backup from 209.141.56.12 port 52988 ssh2


Failed password for svc_backup from 209.141.56.12 port 47881 ssh2


Failed password for svc_backup from 209.141.56.12 port 48457 ssh2


Failed password for svc_backup from 209.141.56.12 port 58376 ssh2


Failed password for svc_backup from 209.141.56.12 port 56024 ssh2


Failed password for svc_backup from 209.141.56.12 port 52874 ssh2


Failed password for svc_backup from 209.141.56.12 port 46308 ssh2


Failed password for svc_backup from 209.141.56.12 port 48366 ssh2


Failed password for svc_backup from 209.141.56.12 port 51930 ssh2


Failed password for svc_backup from 209.141.56.12 port 40556 ssh2


Failed password for svc_backup from 209.141.56.12 port 53798 ssh2


Failed password for svc_backup from 209.141.56.12 port 56949 ssh2


Failed password for svc_backup from 209.141.56.12 port 47713 ssh2


Failed password for svc_backup from 209.141.56.12 port 55715 ssh2


Accepted password for svc_backup from 209.141.56.12 port 51234 ssh2


Failed password for svc_backup from 209.141.56.12 port 50197 ssh2


Failed password for svc_backup from 209.141.56.12 port 48708 ssh2


41.48.113.214 - - "GET /static/app.js HTTP/1.1" 200 3573


61.27.32.83 - - "GET /login HTTP/1.1" 200 519


Failed password for somchai from 193.27.228.114 port 58771 ssh2


Failed password for somchai from 193.27.228.114 port 55463 ssh2


Failed password for somchai from 193.27.228.114 port 51813 ssh2


Failed password for somchai from 193.27.228.114 port 51672 ssh2


Failed password for somchai from 193.27.228.114 port 43018 ssh2


Failed password for somchai from 193.27.228.114 port 45818 ssh2


Failed password for somchai from 193.27.228.114 port 53247 ssh2


Failed password for somchai from 193.27.228.114 port 53649 ssh2


Failed password for somchai from 193.27.228.114 port 50895 ssh2


Failed password for somchai from 193.27.228.114 port 48735 ssh2


Failed password for somchai from 193.27.228.114 port 55988 ssh2


Failed password for somchai from 193.27.228.114 port 45167 ssh2


Failed password for somchai from 193.27.228.114 port 48070 ssh2


Failed password for somchai from 193.27.228.114 port 42173 ssh2


Failed password for somchai from 193.27.228.114 port 49835 ssh2


Failed password for somchai from 193.27.228.114 port 56741 ssh2


ALLOW IN=116.60.107.14 OUT= PROTO=TCP DPT=443


ALLOW IN=20.202.127.45 OUT= PROTO=TCP DPT=80


129.219.88.173 - - "GET /dashboard HTTP/1.1" 200 7492


204.112.232.179 - - "GET / HTTP/1.1" 200 7767


Accepted password for somchai from 10.0.5.28 port 51589 ssh2


52.239.95.193 - - "GET / HTTP/1.1" 200 3796


36.106.128.82 - - "GET /login HTTP/1.1" 200 968


ALLOW IN=218.245.189.128 OUT= PROTO=TCP DPT=443


Accepted password for deploy from 10.0.2.120 port 48683 ssh2


212.6.139.115 - - "GET /login HTTP/1.1" 200 6084


172.95.194.4 - - "GET /api/products HTTP/1.1" 200 844


Accepted password for www-data from 10.0.2.50 port 44002 ssh2


CONN src=10.0.2.175 dst=185.220.101.34 dport=443 bytes=715 interval=30s


CONN src=10.0.2.175 dst=185.220.101.34 dport=443 bytes=232 interval=30s


CONN src=10.0.2.175 dst=185.220.101.34 dport=443 bytes=265 interval=30s


CONN src=10.0.2.175 dst=185.220.101.34 dport=443 bytes=545 interval=30s


CONN src=10.0.2.175 dst=185.220.101.34 dport=443 bytes=640 interval=30s


185.155.205.15 - - "GET /api/orders?page=2 HTTP/1.1" 200 5500


CONN src=10.0.2.175 dst=185.220.101.34 dport=443 bytes=316 interval=30s


159.161.177.18 - - "GET /static/app.js HTTP/1.1" 200 5471


45.137.21.9 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 341


Accepted password for nattapong from 10.0.4.133 port 57912 ssh2


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


32.224.97.36 - - "GET / HTTP/1.1" 200 1781


193.27.228.114 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 500 280


78.218.27.212 - - "GET /static/app.js HTTP/1.1" 200 1922


107.85.241.113 - - "GET /dashboard HTTP/1.1" 200 4339


45.137.21.9 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 403 488


Accepted password for root from 10.0.1.52 port 49309 ssh2


ALLOW IN=69.169.101.197 OUT= PROTO=TCP DPT=80


Accepted password for www-data from 10.0.4.151 port 41021 ssh2


OUTBOUND src=10.0.2.206 dst=209.141.56.12 bytes=4562354176 proto=TCP dport=443 duration=461s


66.243.4.30 - - "GET /api/orders?page=2 HTTP/1.1" 200 3034


Accepted password for root from 10.0.5.156 port 46017 ssh2


ALLOW IN=220.190.132.43 OUT= PROTO=TCP DPT=80


132.109.27.55 - - "GET /health HTTP/1.1" 200 387


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


ALLOW IN=134.223.132.161 OUT= PROTO=TCP DPT=443


ALLOW IN=204.255.226.195 OUT= PROTO=TCP DPT=80


189.57.85.39 - - "GET / HTTP/1.1" 200 3100


CONN src=10.0.1.156 dst=185.220.101.34 dport=443 bytes=537 interval=300s


CONN src=10.0.1.156 dst=185.220.101.34 dport=443 bytes=224 interval=300s


ALLOW IN=84.37.197.130 OUT= PROTO=TCP DPT=443


57.109.174.243 - - "GET /health HTTP/1.1" 200 4183


ALLOW IN=63.134.67.135 OUT= PROTO=TCP DPT=80


CONN src=10.0.1.156 dst=185.220.101.34 dport=443 bytes=836 interval=300s


OUTBOUND src=10.0.4.223 dst=45.137.21.9 bytes=2554331136 proto=TCP dport=443 duration=513s


CONN src=10.0.1.156 dst=185.220.101.34 dport=443 bytes=377 interval=300s


72.29.123.225 - - "GET /static/app.js HTTP/1.1" 200 7957


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


ALLOW IN=87.200.40.71 OUT= PROTO=TCP DPT=443


ALLOW IN=171.136.247.35 OUT= PROTO=TCP DPT=443


CONN src=10.0.1.156 dst=185.220.101.34 dport=443 bytes=598 interval=300s


ALLOW IN=126.58.49.195 OUT= PROTO=TCP DPT=80


Accepted password for nattapong from 10.0.2.130 port 44087 ssh2


64.222.128.86 - - "GET /static/app.js HTTP/1.1" 200 6795


ALLOW IN=202.72.45.83 OUT= PROTO=TCP DPT=80


ALLOW IN=85.82.105.54 OUT= PROTO=TCP DPT=80


Accepted password for svc_backup from 10.0.2.55 port 48748 ssh2


ALLOW IN=44.46.151.84 OUT= PROTO=TCP DPT=443


91.219.236.18 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 200 3


Failed password for www-data from 193.27.228.114 port 48845 ssh2


Failed password for www-data from 193.27.228.114 port 58197 ssh2


Failed password for www-data from 193.27.228.114 port 44779 ssh2


Failed password for www-data from 193.27.228.114 port 52480 ssh2


Failed password for www-data from 193.27.228.114 port 53812 ssh2


Failed password for www-data from 193.27.228.114 port 40319 ssh2


Failed password for www-data from 193.27.228.114 port 44900 ssh2


Failed password for www-data from 193.27.228.114 port 44406 ssh2


Failed password for www-data from 193.27.228.114 port 49831 ssh2


Failed password for www-data from 193.27.228.114 port 58420 ssh2


Failed password for www-data from 193.27.228.114 port 56941 ssh2


Failed password for www-data from 193.27.228.114 port 43243 ssh2


Failed password for www-data from 193.27.228.114 port 50345 ssh2


Accepted password for www-data from 193.27.228.114 port 51234 ssh2


Failed password for www-data from 193.27.228.114 port 41563 ssh2


Failed password for www-data from 193.27.228.114 port 45352 ssh2


ALLOW IN=178.39.128.97 OUT= PROTO=TCP DPT=80


Failed password for guest from 185.220.101.34 port 40430 ssh2


Failed password for guest from 185.220.101.34 port 53662 ssh2


Failed password for guest from 185.220.101.34 port 48423 ssh2


Failed password for guest from 185.220.101.34 port 40637 ssh2


Failed password for guest from 185.220.101.34 port 54416 ssh2


Failed password for guest from 185.220.101.34 port 54845 ssh2


Failed password for guest from 185.220.101.34 port 53978 ssh2


Failed password for guest from 185.220.101.34 port 45796 ssh2


Failed password for guest from 185.220.101.34 port 55107 ssh2


Failed password for guest from 185.220.101.34 port 54220 ssh2


Failed password for guest from 185.220.101.34 port 44662 ssh2


Failed password for guest from 185.220.101.34 port 56214 ssh2


Failed password for guest from 185.220.101.34 port 40461 ssh2


Failed password for guest from 185.220.101.34 port 55262 ssh2


Failed password for guest from 185.220.101.34 port 40118 ssh2


Failed password for guest from 185.220.101.34 port 48211 ssh2


Failed password for guest from 185.220.101.34 port 53650 ssh2


Failed password for guest from 185.220.101.34 port 55681 ssh2


Failed password for guest from 185.220.101.34 port 57574 ssh2


Failed password for guest from 185.220.101.34 port 55012 ssh2


Failed password for guest from 185.220.101.34 port 59857 ssh2


Failed password for guest from 185.220.101.34 port 56841 ssh2


Failed password for guest from 185.220.101.34 port 59879 ssh2


ALLOW IN=146.255.207.8 OUT= PROTO=TCP DPT=443


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=403 interval=30s


OUTBOUND src=10.0.1.119 dst=193.27.228.114 bytes=2930769920 proto=TCP dport=443 duration=262s


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=897 interval=30s


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=204 interval=30s


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=269 interval=30s


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=651 interval=30s


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=435 interval=30s


CONN src=10.0.2.8 dst=209.141.56.12 dport=443 bytes=895 interval=30s


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=209.141.56.12 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


Failed password for nattapong from 185.220.101.34 port 41486 ssh2


Failed password for nattapong from 185.220.101.34 port 54257 ssh2


Failed password for nattapong from 185.220.101.34 port 58939 ssh2


Failed password for nattapong from 185.220.101.34 port 44139 ssh2


Failed password for nattapong from 185.220.101.34 port 44142 ssh2


Failed password for nattapong from 185.220.101.34 port 58825 ssh2


Failed password for nattapong from 185.220.101.34 port 41631 ssh2


Failed password for nattapong from 185.220.101.34 port 53084 ssh2


Failed password for nattapong from 185.220.101.34 port 51212 ssh2


Failed password for nattapong from 185.220.101.34 port 56283 ssh2


Failed password for nattapong from 185.220.101.34 port 55052 ssh2


Failed password for nattapong from 185.220.101.34 port 46922 ssh2


Failed password for nattapong from 185.220.101.34 port 49124 ssh2


Failed password for nattapong from 185.220.101.34 port 41914 ssh2


Failed password for nattapong from 185.220.101.34 port 49014 ssh2


Failed password for nattapong from 185.220.101.34 port 45820 ssh2


Accepted password for nattapong from 185.220.101.34 port 51234 ssh2


Failed password for nattapong from 185.220.101.34 port 45339 ssh2


Failed password for nattapong from 185.220.101.34 port 50751 ssh2


Failed password for nattapong from 185.220.101.34 port 49174 ssh2


ALLOW IN=186.182.44.11 OUT= PROTO=TCP DPT=80


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


ALLOW IN=211.142.236.63 OUT= PROTO=TCP DPT=443


ALLOW IN=79.42.217.21 OUT= PROTO=TCP DPT=443


184.253.130.13 - - "GET /api/orders?page=2 HTTP/1.1" 200 3316


40.211.195.97 - - "GET /api/products HTTP/1.1" 200 3260


67.254.42.22 - - "GET /api/products HTTP/1.1" 200 7128


38.130.222.91 - - "GET /login HTTP/1.1" 200 7431


189.151.180.246 - - "GET /dashboard HTTP/1.1" 200 2990


ALLOW IN=223.84.203.55 OUT= PROTO=TCP DPT=80


188.231.21.234 - - "GET /login HTTP/1.1" 200 501


ALLOW IN=58.222.218.24 OUT= PROTO=TCP DPT=80


ALLOW IN=32.229.34.15 OUT= PROTO=TCP DPT=443


ALLOW IN=137.100.125.39 OUT= PROTO=TCP DPT=80


ALLOW IN=180.155.83.211 OUT= PROTO=TCP DPT=80


Accepted password for deploy from 10.0.1.148 port 45413 ssh2


185.220.101.34 - - "GET /api/products?id='; DROP TABLE sessions;-- HTTP/1.1" 500 492


Failed password for guest from 45.137.21.9 port 49970 ssh2


Failed password for guest from 45.137.21.9 port 48641 ssh2


Failed password for guest from 45.137.21.9 port 52437 ssh2


Failed password for guest from 45.137.21.9 port 59118 ssh2


Failed password for guest from 45.137.21.9 port 45581 ssh2


Failed password for guest from 45.137.21.9 port 50463 ssh2


ALLOW IN=196.80.77.152 OUT= PROTO=TCP DPT=443


Failed password for guest from 45.137.21.9 port 59140 ssh2


Failed password for guest from 45.137.21.9 port 43928 ssh2


Failed password for guest from 45.137.21.9 port 54640 ssh2


Accepted password for guest from 45.137.21.9 port 51234 ssh2


Failed password for guest from 45.137.21.9 port 44009 ssh2


Failed password for guest from 45.137.21.9 port 57288 ssh2


152.176.217.191 - - "GET /static/app.js HTTP/1.1" 200 2909


185.220.101.34 - - "GET /search?q=<script>alert(1)</script> HTTP/1.1" 403 91


93.107.157.204 - - "GET /static/app.js HTTP/1.1" 200 7472


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=193.27.228.114 OUT= PROTO=TCP DPT=443 FLAGS=SYN


147.67.2.22 - - "GET /dashboard HTTP/1.1" 200 5597


48.217.216.150 - - "GET /login HTTP/1.1" 200 2010


sudo: svc_backup : TTY=pts/0 ; PWD=/home/svc_backup ; USER=root ; COMMAND=/bin/bash


162.178.190.73 - - "GET /dashboard HTTP/1.1" 200 7109


sudo: postgres : TTY=pts/0 ; PWD=/home/postgres ; USER=root ; COMMAND=/usr/bin/passwd root


ALLOW IN=130.4.91.95 OUT= PROTO=TCP DPT=443


22.66.44.166 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 279


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=25 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


ALLOW IN=201.214.79.227 OUT= PROTO=TCP DPT=443


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=80 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=90.100.142.22 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


ALLOW IN=152.74.164.189 OUT= PROTO=TCP DPT=443


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=275 interval=300s


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=6379 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3389 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=22 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=27017 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=5432 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=3306 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=443 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=53 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=21 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=8080 FLAGS=SYN


DROP IN=91.219.236.18 OUT= PROTO=TCP DPT=80 FLAGS=SYN


139.197.1.14 - - "GET /api/products HTTP/1.1" 200 2963


208.24.75.91 - - "GET /api/products HTTP/1.1" 200 3934


Accepted password for svc_backup from 10.0.0.4 port 50439 ssh2


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=688 interval=300s


ALLOW IN=138.50.174.93 OUT= PROTO=TCP DPT=443


ALLOW IN=142.182.94.61 OUT= PROTO=TCP DPT=443


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=808 interval=300s


ALLOW IN=137.72.121.177 OUT= PROTO=TCP DPT=80


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=361 interval=300s


ALLOW IN=202.17.30.39 OUT= PROTO=TCP DPT=443


Accepted password for guest from 10.0.5.232 port 41725 ssh2


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=230 interval=300s


Accepted password for nattapong from 10.0.2.91 port 50095 ssh2


165.240.63.46 - - "GET /api/products HTTP/1.1" 200 1384


152.9.176.125 - - "GET /api/orders?page=2 HTTP/1.1" 200 5097


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=350 interval=300s


Failed password for guest from 185.220.101.34 port 43487 ssh2


Failed password for guest from 185.220.101.34 port 54865 ssh2


Failed password for guest from 185.220.101.34 port 46171 ssh2


Failed password for guest from 185.220.101.34 port 50045 ssh2


Failed password for guest from 185.220.101.34 port 53307 ssh2


Failed password for guest from 185.220.101.34 port 40019 ssh2


Failed password for guest from 185.220.101.34 port 44730 ssh2


Failed password for guest from 185.220.101.34 port 40770 ssh2


Failed password for guest from 185.220.101.34 port 41019 ssh2


Failed password for guest from 185.220.101.34 port 43532 ssh2


Failed password for guest from 185.220.101.34 port 46085 ssh2


Failed password for guest from 185.220.101.34 port 48304 ssh2


Failed password for guest from 185.220.101.34 port 46856 ssh2


Failed password for guest from 185.220.101.34 port 59580 ssh2


Failed password for guest from 185.220.101.34 port 43967 ssh2


Failed password for guest from 185.220.101.34 port 43164 ssh2


Failed password for guest from 185.220.101.34 port 43897 ssh2


Failed password for guest from 185.220.101.34 port 51715 ssh2


Failed password for guest from 185.220.101.34 port 51244 ssh2


Failed password for guest from 185.220.101.34 port 42337 ssh2


Failed password for guest from 185.220.101.34 port 53205 ssh2


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=574 interval=300s


Failed password for www-data from 193.27.228.114 port 54639 ssh2


Failed password for www-data from 193.27.228.114 port 58486 ssh2


Failed password for www-data from 193.27.228.114 port 51854 ssh2


Failed password for www-data from 193.27.228.114 port 42023 ssh2


Failed password for www-data from 193.27.228.114 port 58766 ssh2


Failed password for www-data from 193.27.228.114 port 50751 ssh2


Failed password for www-data from 193.27.228.114 port 46730 ssh2


Failed password for www-data from 193.27.228.114 port 56563 ssh2


Failed password for www-data from 193.27.228.114 port 44910 ssh2


Failed password for www-data from 193.27.228.114 port 54478 ssh2


33.160.10.194 - - "GET /api/products?id=' OR '1'='1 HTTP/1.1" 200 163


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=344 interval=300s


CONN src=10.0.5.29 dst=45.137.21.9 dport=443 bytes=280 interval=300s


151.43.68.193 - - "GET / HTTP/1.1" 200 2617


Failed password for deploy from 114.212.202.249 port 56041 ssh2


Failed password for deploy from 114.212.202.249 port 59277 ssh2


Failed password for deploy from 114.212.202.249 port 53395 ssh2


Failed password for deploy from 114.212.202.249 port 44078 ssh2


86.151.163.39 - - "GET / HTTP/1.1" 200 6784


Failed password for deploy from 114.212.202.249 port 46364 ssh2