Suspicious activity from selenium/standalone-firefox:2.48.2

[oholubyev]

Is there a reason my container based on selenium/standalone-firefox:2.48.2 is now a botnet?

selenium_1            | 09:41:33.242 WARN - CONNECT 123.57.212.46:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:36.691 WARN - CONNECT 112.126.84.64:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | jar:file:/opt/selenium/selenium-server-standalone.jar!/sslSupport
selenium_1            | jar:file:/opt/selenium/selenium-server-standalone.jar!/sslSupport
selenium_1            | 09:41:38.034 WARN - CONNECT 115.29.245.144:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:38.357 WARN - CONNECT passport.yandex.ru:443 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:38.359 WARN - CONNECT passport.yandex.ru:443 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:38.362 WARN - CONNECT passport.yandex.ru:443 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:38.649 WARN - CONNECT 120.26.160.86:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:39.381 WARN - CONNECT 120.26.161.51:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:39.411 WARN - CONNECT passport.yandex.ru:443 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:40.260 WARN - CONNECT 112.126.84.65:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | jar:file:/opt/selenium/selenium-server-standalone.jar!/sslSupport
selenium_1            | 09:41:43.407 WARN - CONNECT 112.126.84.66:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:44.318 WARN - CONNECT 120.26.0.138:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:44.389 WARN - CONNECT 112.124.61.106:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:44.936 WARN - CONNECT 120.26.2.146:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:46.033 WARN - CONNECT 112.126.85.124:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:46.961 WARN - CONNECT 123.57.212.46:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | jar:file:/opt/selenium/selenium-server-standalone.jar!/sslSupport
selenium_1            | 09:41:49.844 WARN - CONNECT 120.55.117.113:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:51.310 WARN - CONNECT 112.124.100.36:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | jar:file:/opt/selenium/selenium-server-standalone.jar!/sslSupport
selenium_1            | 09:41:52.452 WARN - CONNECT 123.56.145.90:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:52.928 INFO - Couldn't proxy to http://www.simhot.net/sim-vinaphone.html because host not found
selenium_1            | 09:41:52.952 INFO - Couldn't proxy to http://www.simhot.net/ because host not found
selenium_1            | 09:41:53.380 WARN - CONNECT 121.42.142.160:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:53.871 WARN - CONNECT 123.57.10.197:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:56.566 WARN - CONNECT 121.43.197.152:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:57.816 WARN - CONNECT 120.26.2.204:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:58.474 WARN - CONNECT www.weebly.com:443 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:59.073 WARN - CONNECT 112.124.61.104:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:59.124 WARN - CONNECT 120.26.63.176:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:59.528 WARN - CONNECT 123.57.46.223:15010 HTTP/1.1 HttpException(400,Bad Request,null)
selenium_1            | 09:41:59.684 WARN - CONNECT 120.26.16.176:15010 HTTP/1.1 HttpException(400,Bad Request,null)

[elgalu]

You probably exposed your selenium to the world, maybe you put it in AWS and left selenium port open to everyone.

[oholubyev]

@elgalu thanks! That's what it was.