[15/Mar/2022:01:30:57 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [15/Mar/2022:01:30:58 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [15/Mar/2022:01:30:58 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [15/Mar/2022:01:30:59 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [15/Mar/2022:02:57:25 +0100] 193.118.53.202 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [15/Mar/2022:04:53:26 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [15/Mar/2022:04:54:05 +0100] 45.154.255.147 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Mar/2022:04:54:15 +0100] 185.220.100.253 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [15/Mar/2022:05:00:44 +0100] 192.241.225.160 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [15/Mar/2022:05:01:29 +0100] 192.241.224.132 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [15/Mar/2022:05:02:50 +0100] 192.241.224.133 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [15/Mar/2022:05:20:30 +0100] 68.183.84.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374 [15/Mar/2022:05:42:34 +0100] 192.241.223.234 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [15/Mar/2022:05:42:42 +0100] 192.241.222.110 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [15/Mar/2022:06:31:58 +0100] 34.77.162.14 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [15/Mar/2022:06:38:13 +0100] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [15/Mar/2022:06:56:24 +0100] 64.62.197.92 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [15/Mar/2022:07:04:59 +0100] 95.173.160.160 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [15/Mar/2022:07:05:04 +0100] 95.173.160.160 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [15/Mar/2022:07:19:19 +0100] 71.6.232.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Mar/2022:07:25:22 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [15/Mar/2022:07:25:22 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [15/Mar/2022:07:25:23 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [15/Mar/2022:07:25:23 +0100] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [15/Mar/2022:07:35:56 +0100] 192.241.223.78 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [15/Mar/2022:09:49:13 +0100] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [15/Mar/2022:09:49:14 +0100] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [15/Mar/2022:09:49:22 +0100] 40.77.167.1 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302 [15/Mar/2022:09:54:15 +0100] 139.162.145.250 TLSv1.2 AES256-SHA "GET /bag2 HTTP/1.1" 304 [15/Mar/2022:10:00:54 +0100] 47.74.84.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=l4sBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 339 [15/Mar/2022:10:00:57 +0100] 47.74.84.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=dfwBAAABAAAAAAAAA3d3dwZnb29nbGUDY29tAAABAAE HTTP/1.1" 339 [15/Mar/2022:10:01:33 +0100] 40.77.167.95 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [15/Mar/2022:10:01:34 +0100] 40.77.167.95 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [15/Mar/2022:10:01:39 +0100] 157.55.39.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [15/Mar/2022:10:34:44 +0100] 194.110.115.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [15/Mar/2022:10:42:50 +0100] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [15/Mar/2022:11:01:33 +0100] 192.241.225.123 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Mar/2022:12:08:14 +0100] 27.213.55.200 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388 [15/Mar/2022:12:08:15 +0100] 27.213.55.200 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Mar/2022:15:15:02 +0100] 167.248.133.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [15/Mar/2022:15:15:02 +0100] 167.248.133.118 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Mar/2022:15:15:03 +0100] 167.248.133.118 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [15/Mar/2022:16:54:11 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [15/Mar/2022:16:54:12 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [15/Mar/2022:16:54:12 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [15/Mar/2022:16:54:13 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [15/Mar/2022:18:30:17 +0100] 193.118.53.210 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /owa/ HTTP/1.1" 304 [15/Mar/2022:18:41:38 +0100] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /owa/ HTTP/1.1" 304 [15/Mar/2022:18:54:03 +0100] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /owa/ HTTP/1.1" 304 [15/Mar/2022:19:47:06 +0100] 34.77.162.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [15/Mar/2022:20:17:19 +0100] 136.243.66.94 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [15/Mar/2022:20:58:53 +0100] 51.158.108.77 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [15/Mar/2022:21:32:50 +0100] 164.92.149.96 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Mar/2022:21:46:23 +0100] 84.44.90.90 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@foo.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3f@foo.com HTTP/1.1" 353 [15/Mar/2022:21:55:18 +0100] 23.90.160.114 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [15/Mar/2022:21:55:19 +0100] 23.90.160.114 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /showLogin.cc HTTP/1.1" 311 [15/Mar/2022:22:51:31 +0100] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [15/Mar/2022:22:51:46 +0100] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /webfig/ HTTP/1.1" 307 [15/Mar/2022:23:21:09 +0100] 45.134.144.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [16/Mar/2022:00:20:57 +0100] 134.122.14.60 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [16/Mar/2022:00:21:35 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [16/Mar/2022:00:21:35 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [16/Mar/2022:00:21:36 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [16/Mar/2022:00:21:36 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [16/Mar/2022:00:25:40 +0100] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [16/Mar/2022:00:34:22 +0100] 109.248.6.125 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.0" 399 [16/Mar/2022:00:35:50 +0100] 51.159.102.248 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" -