[24/Mar/2022:01:43:02 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[24/Mar/2022:01:43:03 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[24/Mar/2022:01:43:03 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[24/Mar/2022:01:43:03 +0100] 109.237.103.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[24/Mar/2022:03:51:10 +0100] 66.240.236.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:04:54:09 +0100] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[24/Mar/2022:06:02:19 +0100] 184.105.139.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[24/Mar/2022:06:19:02 +0100] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[24/Mar/2022:06:30:45 +0100] 192.241.212.131 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[24/Mar/2022:06:30:50 +0100] 192.241.224.69 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[24/Mar/2022:07:05:19 +0100] 192.3.180.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[24/Mar/2022:07:05:20 +0100] 192.3.180.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[24/Mar/2022:07:08:40 +0100] 179.43.176.91 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[24/Mar/2022:07:32:34 +0100] 5.188.159.169 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[24/Mar/2022:08:19:13 +0100] 147.78.47.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /spog/welcome HTTP/1.1" 309
[24/Mar/2022:08:19:13 +0100] 147.78.47.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/welcome HTTP/1.1" 313
[24/Mar/2022:09:04:32 +0100] 40.77.167.1 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302
[24/Mar/2022:10:54:50 +0100] 157.55.39.29 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[24/Mar/2022:11:28:04 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[24/Mar/2022:12:14:53 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "-" -
[24/Mar/2022:12:16:53 +0100] 179.60.147.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[24/Mar/2022:12:56:03 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[24/Mar/2022:14:07:20 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[24/Mar/2022:14:27:55 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[24/Mar/2022:15:14:16 +0100] 31.204.128.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394
[24/Mar/2022:15:31:12 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[24/Mar/2022:16:18:57 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[24/Mar/2022:16:55:37 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[24/Mar/2022:17:05:06 +0100] 192.241.223.35 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[24/Mar/2022:17:14:00 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298
[24/Mar/2022:17:14:00 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 300
[24/Mar/2022:17:14:01 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298
[24/Mar/2022:17:14:01 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 300
[24/Mar/2022:17:14:02 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 307
[24/Mar/2022:17:14:02 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 304
[24/Mar/2022:17:14:03 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 304
[24/Mar/2022:17:14:03 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 307
[24/Mar/2022:17:14:04 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 303
[24/Mar/2022:17:14:04 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 306
[24/Mar/2022:17:14:04 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 303
[24/Mar/2022:17:14:05 +0100] 185.174.28.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 306
[24/Mar/2022:17:42:39 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[24/Mar/2022:17:42:39 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[24/Mar/2022:17:42:40 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[24/Mar/2022:17:42:41 +0100] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[24/Mar/2022:18:00:49 +0100] 159.223.212.173 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:18:02:21 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:18:22:08 +0100] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[24/Mar/2022:18:22:10 +0100] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[24/Mar/2022:18:22:16 +0100] 40.77.167.1 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302
[24/Mar/2022:18:41:02 +0100] 35.84.24.48 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/HEAD HTTP/1.1" 392
[24/Mar/2022:18:44:15 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:18:46:15 +0100] 35.240.96.147 TLSv1.2 AES256-SHA "POST /commit.php HTTP/1.1" 393
[24/Mar/2022:19:11:25 +0100] 91.240.118.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[24/Mar/2022:19:14:49 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293
[24/Mar/2022:19:48:20 +0100] 45.146.165.37 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:20:07:54 +0100] 192.241.224.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:21:27:13 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[24/Mar/2022:21:27:14 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[24/Mar/2022:21:27:14 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[24/Mar/2022:21:27:15 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[24/Mar/2022:21:27:15 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/.credentials HTTP/1.1" 311
[24/Mar/2022:21:27:16 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/.credentials HTTP/1.1" 311
[24/Mar/2022:21:27:16 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[24/Mar/2022:21:27:17 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[24/Mar/2022:21:27:17 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/.credentials HTTP/1.1" 311
[24/Mar/2022:21:27:18 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/.credentials HTTP/1.1" 311
[24/Mar/2022:21:27:18 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws/credentials HTTP/1.1" 316
[24/Mar/2022:21:27:19 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws/credentials HTTP/1.1" 316
[24/Mar/2022:21:27:20 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws/.credentials HTTP/1.1" 317
[24/Mar/2022:21:27:20 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws/.credentials HTTP/1.1" 317
[24/Mar/2022:21:27:21 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/aws/credentials HTTP/1.1" 316
[24/Mar/2022:21:27:21 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/aws/credentials HTTP/1.1" 316
[24/Mar/2022:21:27:22 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/aws/.credentials HTTP/1.1" 316
[24/Mar/2022:21:27:22 +0100] 109.237.103.123 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/aws/.credentials HTTP/1.1" 316
[24/Mar/2022:21:30:54 +0100] 51.158.108.77 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385
[24/Mar/2022:22:15:00 +0100] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380
[24/Mar/2022:22:20:08 +0100] 35.88.238.184 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[24/Mar/2022:23:47:02 +0100] 43.131.91.178 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500
[24/Mar/2022:23:47:13 +0100] 8.31.2.108 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:23:47:18 +0100] 211.95.50.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:23:47:19 +0100] 209.141.42.155 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[24/Mar/2022:23:47:23 +0100] 101.227.1.199 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[24/Mar/2022:23:47:29 +0100] 8.31.2.67 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297
[24/Mar/2022:23:47:30 +0100] 209.141.51.222 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314
[24/Mar/2022:23:47:30 +0100] 209.141.36.112 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[24/Mar/2022:23:47:32 +0100] 111.7.100.16 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297
[24/Mar/2022:23:47:33 +0100] 111.7.100.19 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[24/Mar/2022:23:47:37 +0100] 205.185.117.203 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:23:47:38 +0100] 205.185.122.184 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305
[24/Mar/2022:23:47:40 +0100] 211.95.50.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[24/Mar/2022:23:47:42 +0100] 209.141.36.112 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[24/Mar/2022:23:47:44 +0100] 209.141.35.128 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[24/Mar/2022:23:47:51 +0100] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 308
[25/Mar/2022:00:13:32 +0100] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391
[25/Mar/2022:00:15:09 +0100] 52.25.174.201 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[25/Mar/2022:00:15:42 +0100] 52.25.47.19 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313
[25/Mar/2022:00:15:49 +0100] 52.25.47.19 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306