[13/Jan/2022:01:33:04 +0100] 192.241.217.91 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[13/Jan/2022:01:34:32 +0100] 198.199.107.58 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[13/Jan/2022:01:35:08 +0100] 192.241.219.31 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[13/Jan/2022:02:30:28 +0100] 207.46.13.56 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 302
[13/Jan/2022:04:03:49 +0100] 156.96.156.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[13/Jan/2022:04:03:50 +0100] 156.96.156.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[13/Jan/2022:04:07:50 +0100] 192.241.205.59 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[13/Jan/2022:04:20:59 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304
[13/Jan/2022:04:37:23 +0100] 162.142.125.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[13/Jan/2022:04:37:24 +0100] 162.142.125.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:04:45:28 +0100] 64.62.197.182 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[13/Jan/2022:04:48:03 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[13/Jan/2022:07:02:30 +0100] 208.100.26.247 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298
[13/Jan/2022:07:35:31 +0100] 192.241.217.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:07:52:46 +0100] 212.243.9.107 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[13/Jan/2022:08:08:59 +0100] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[13/Jan/2022:09:24:34 +0100] 167.94.138.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[13/Jan/2022:09:24:35 +0100] 167.94.138.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:09:45:52 +0100] 2.56.56.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[13/Jan/2022:09:45:53 +0100] 2.56.56.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[13/Jan/2022:10:33:41 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[13/Jan/2022:11:12:54 +0100] 3.145.135.127 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:11:16:47 +0100] 192.241.219.52 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[13/Jan/2022:11:27:32 +0100] 192.241.214.242 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[13/Jan/2022:11:43:20 +0100] 193.118.53.210 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[13/Jan/2022:11:55:35 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[13/Jan/2022:12:01:22 +0100] 207.46.13.56 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 302
[13/Jan/2022:12:49:24 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[13/Jan/2022:13:28:25 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[13/Jan/2022:13:42:25 +0100] 66.240.236.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:13:52:04 +0100] 207.46.13.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311
[13/Jan/2022:13:52:06 +0100] 207.46.13.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 311
[13/Jan/2022:13:52:13 +0100] 40.77.167.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 304
[13/Jan/2022:14:48:17 +0100] 109.248.6.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.0" 399
[13/Jan/2022:14:59:46 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[13/Jan/2022:15:17:37 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[13/Jan/2022:16:10:33 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[13/Jan/2022:16:54:48 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[13/Jan/2022:18:19:27 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:18:45:51 +0100] 139.162.145.250 TLSv1.2 AES256-SHA "GET /bag2 HTTP/1.1" 304
[13/Jan/2022:19:34:06 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293
[13/Jan/2022:19:39:16 +0100] 185.220.100.242 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:19:39:47 +0100] 185.220.101.37 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[13/Jan/2022:20:20:13 +0100] 80.82.65.18 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[13/Jan/2022:20:45:31 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "-" -
[13/Jan/2022:20:47:36 +0100] 204.12.198.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[13/Jan/2022:23:00:04 +0100] 39.96.140.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=CjgBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 340
[13/Jan/2022:23:00:07 +0100] 39.96.140.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=VpsBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 340
[13/Jan/2022:23:12:27 +0100] 34.96.130.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394
[13/Jan/2022:23:36:31 +0100] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301
[14/Jan/2022:00:37:43 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[14/Jan/2022:00:37:55 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "PROPFIND / HTTP/1.1" 383
[14/Jan/2022:00:37:55 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:37:55 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[14/Jan/2022:00:37:55 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925
[14/Jan/2022:00:37:57 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /IPHTTPS HTTP/1.1" 500
[14/Jan/2022:00:37:57 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394
[14/Jan/2022:00:37:58 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "FXBC / HTTP/1.1" 383
[14/Jan/2022:00:37:58 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:37:59 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:37:59 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[14/Jan/2022:00:37:59 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388
[14/Jan/2022:00:37:59 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" -
[14/Jan/2022:00:38:00 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:38:00 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" -
[14/Jan/2022:00:38:01 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:38:01 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 383
[14/Jan/2022:00:38:02 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:38:02 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:38:02 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:38:03 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:38:03 +0100] 89.248.165.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 383
[14/Jan/2022:00:42:52 +0100] 156.146.50.162 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" 301