[08/Apr/2021:02:17:22 +0200] 52.42.212.131 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [08/Apr/2021:02:18:01 +0200] 44.234.254.131 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [08/Apr/2021:02:18:05 +0200] 44.234.254.131 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [08/Apr/2021:04:50:20 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [08/Apr/2021:05:46:03 +0200] 64.62.197.92 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [08/Apr/2021:06:17:45 +0200] 192.241.222.79 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [08/Apr/2021:06:24:20 +0200] 45.155.126.3 TLSv1.2 AES256-SHA "-" - [08/Apr/2021:06:45:27 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [08/Apr/2021:07:34:58 +0200] 128.14.134.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:07:36:44 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [08/Apr/2021:08:16:56 +0200] 74.120.14.55 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [08/Apr/2021:08:16:57 +0200] 74.120.14.55 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:09:19:36 +0200] 45.155.205.165 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 341 [08/Apr/2021:10:55:07 +0200] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [08/Apr/2021:12:54:13 +0200] 23.129.64.236 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:13:42:59 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /api/jsonws/invoke HTTP/1.1" 314 [08/Apr/2021:13:43:01 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [08/Apr/2021:13:43:01 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [08/Apr/2021:13:43:02 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [08/Apr/2021:13:43:05 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [08/Apr/2021:13:43:05 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [08/Apr/2021:13:43:09 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /wp-content/plugins/wp-file-manager/readme.txt HTTP/1.1" 332 [08/Apr/2021:13:43:09 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [08/Apr/2021:13:43:11 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [08/Apr/2021:13:43:12 +0200] 45.155.205.211 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [08/Apr/2021:15:20:38 +0200] 45.33.103.57 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304 [08/Apr/2021:15:39:23 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [08/Apr/2021:16:12:06 +0200] 107.151.182.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:16:12:19 +0200] 107.151.182.58 TLSv1.2 AES256-SHA "GET /webfig/ HTTP/1.1" 307 [08/Apr/2021:19:00:02 +0200] 45.227.255.166 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/x.js HTTP/1.1" 396 [08/Apr/2021:19:41:52 +0200] 23.92.21.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [08/Apr/2021:19:59:27 +0200] 45.33.102.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:20:59:20 +0200] 139.177.182.155 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [08/Apr/2021:20:59:26 +0200] 139.177.182.155 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [08/Apr/2021:21:12:47 +0200] 80.82.77.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [08/Apr/2021:21:19:11 +0200] 66.249.66.218 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [08/Apr/2021:21:19:12 +0200] 66.249.66.220 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:22:27:47 +0200] 161.35.213.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Apr/2021:23:22:24 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /myjsp.jsp/ HTTP/1.1" 307 [08/Apr/2021:23:22:26 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /myjsp.jsp HTTP/1.1" 307 [08/Apr/2021:23:22:30 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /myjsp.jsp/ HTTP/1.1" 307 [08/Apr/2021:23:22:33 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /myjsp.jsp/ HTTP/1.1" 307 [08/Apr/2021:23:22:34 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /myjsp.jsp HTTP/1.1" 307 [08/Apr/2021:23:22:38 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /myjsp.jsp/ HTTP/1.1" 307 [08/Apr/2021:23:22:46 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /etc/passwd HTTP/1.1" 307 [08/Apr/2021:23:22:50 +0200] 193.169.255.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PUT /myjsp.jsp/ HTTP/1.1" 307 [08/Apr/2021:23:45:22 +0200] 52.11.225.217 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [08/Apr/2021:23:46:51 +0200] 18.237.139.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [08/Apr/2021:23:47:04 +0200] 34.208.149.19 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [08/Apr/2021:23:47:25 +0200] 54.69.127.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [09/Apr/2021:00:15:31 +0200] 52.11.225.217 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [09/Apr/2021:00:15:57 +0200] 34.222.96.247 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [09/Apr/2021:00:16:49 +0200] 54.187.231.21 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [09/Apr/2021:00:29:41 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [09/Apr/2021:00:43:25 +0200] 13.72.102.159 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [09/Apr/2021:01:11:04 +0200] 54.244.37.196 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306