[27/Apr/2022:02:52:47 +0200] 23.251.102.82 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Apr/2022:03:15:38 +0200] 192.241.222.165 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [27/Apr/2022:03:36:17 +0200] 23.129.64.139 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:03:36:29 +0200] 83.137.158.6 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [27/Apr/2022:03:46:59 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 392 [27/Apr/2022:03:47:00 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 433 [27/Apr/2022:03:47:02 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 392 [27/Apr/2022:03:47:02 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 383 [27/Apr/2022:03:47:03 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 433 [27/Apr/2022:03:47:03 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 424 [27/Apr/2022:03:47:04 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 383 [27/Apr/2022:03:47:04 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /resolve HTTP/1.1" 390 [27/Apr/2022:03:47:05 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 424 [27/Apr/2022:03:47:05 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /resolve?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 431 [27/Apr/2022:03:47:06 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /resolve HTTP/1.1" 390 [27/Apr/2022:03:47:06 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /doh HTTP/1.1" 386 [27/Apr/2022:03:47:07 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /doh?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 427 [27/Apr/2022:03:47:07 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /resolve?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 431 [27/Apr/2022:03:47:08 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /doh HTTP/1.1" 386 [27/Apr/2022:03:47:08 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /doh/family-filter HTTP/1.1" 400 [27/Apr/2022:03:47:10 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /doh?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 427 [27/Apr/2022:03:47:09 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /doh/family-filter?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 441 [27/Apr/2022:03:47:11 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /doh/secure-filter HTTP/1.1" 400 [27/Apr/2022:03:47:11 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /doh/family-filter HTTP/1.1" 400 [27/Apr/2022:03:47:12 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /doh/secure-filter?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 441 [27/Apr/2022:03:47:12 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /doh/family-filter?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 441 [27/Apr/2022:03:47:14 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /query HTTP/1.1" 388 [27/Apr/2022:03:47:14 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /doh/secure-filter HTTP/1.1" 400 [27/Apr/2022:03:47:15 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /query?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 429 [27/Apr/2022:03:47:15 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /doh/secure-filter?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 441 [27/Apr/2022:03:47:16 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ads HTTP/1.1" 386 [27/Apr/2022:03:47:17 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /query HTTP/1.1" 388 [27/Apr/2022:03:47:18 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /query?dns=DUIBAAABAAAAAAAABWJhaWR1A2NvbQAAAQAB HTTP/1.1" 429 [27/Apr/2022:03:47:19 +0200] 43.128.61.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ads HTTP/1.1" 386 [27/Apr/2022:04:04:48 +0200] 162.221.192.90 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Apr/2022:04:46:13 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [27/Apr/2022:04:47:33 +0200] 80.82.78.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:05:49:37 +0200] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Apr/2022:06:03:51 +0200] 192.241.213.192 TLSv1.2 AES256-SHA "GET /ReportServer HTTP/1.1" 307 [27/Apr/2022:06:11:48 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [27/Apr/2022:06:38:39 +0200] 157.55.39.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Apr/2022:06:40:10 +0200] 192.241.222.59 TLSv1.2 AES256-SHA "GET /login HTTP/1.1" 305 [27/Apr/2022:06:59:53 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Apr/2022:07:07:07 +0200] 167.94.138.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Apr/2022:07:07:07 +0200] 167.94.138.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:07:07:08 +0200] 167.94.138.61 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [27/Apr/2022:07:57:18 +0200] 192.241.221.130 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [27/Apr/2022:08:35:51 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:09:39:23 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Apr/2022:10:17:45 +0200] 192.241.213.23 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:10:56:39 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [27/Apr/2022:11:07:33 +0200] 192.241.213.19 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [27/Apr/2022:11:07:56 +0200] 192.241.222.24 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [27/Apr/2022:11:08:31 +0200] 192.241.220.248 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [27/Apr/2022:11:09:31 +0200] 198.235.24.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [27/Apr/2022:12:06:31 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [27/Apr/2022:12:33:16 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [27/Apr/2022:12:53:55 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Apr/2022:12:54:24 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Apr/2022:12:54:25 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Apr/2022:12:54:26 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Apr/2022:12:54:30 +0200] 198.20.87.98 TLSv1.2 AES256-SHA "quit" 379 [27/Apr/2022:12:54:34 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 393 [27/Apr/2022:12:54:35 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 394 [27/Apr/2022:12:54:36 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 407 [27/Apr/2022:12:54:38 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [27/Apr/2022:12:54:42 +0200] 198.20.87.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [27/Apr/2022:13:03:14 +0200] 74.82.47.5 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [27/Apr/2022:13:15:43 +0200] 172.245.10.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /GponForm/diag_Form?style/ HTTP/1.1" 406 [27/Apr/2022:13:45:16 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [27/Apr/2022:14:34:34 +0200] 45.83.66.126 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 293 [27/Apr/2022:14:34:34 +0200] 45.83.67.165 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 293 [27/Apr/2022:15:18:38 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [27/Apr/2022:15:27:59 +0200] 80.85.87.121 - - "-" - [27/Apr/2022:15:40:23 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [27/Apr/2022:16:10:31 +0200] 54.36.148.115 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 315 [27/Apr/2022:16:10:32 +0200] 54.36.148.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 308 [27/Apr/2022:16:16:55 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [27/Apr/2022:16:24:56 +0200] 157.55.39.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [27/Apr/2022:17:04:12 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [27/Apr/2022:17:15:17 +0200] 92.118.161.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Apr/2022:17:39:52 +0200] 185.180.143.79 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Apr/2022:18:05:20 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 313 [27/Apr/2022:18:05:21 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /info.php HTTP/1.1" 313 [27/Apr/2022:18:11:20 +0200] 154.89.5.77 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [27/Apr/2022:18:11:21 +0200] 154.89.5.77 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [27/Apr/2022:18:31:43 +0200] 137.226.113.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [27/Apr/2022:19:34:18 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [27/Apr/2022:20:00:39 +0200] 45.79.102.172 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:20:41:38 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "POST /_ignition/execute-solution HTTP/1.1" 319 [27/Apr/2022:20:41:40 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:20:41:42 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /script HTTP/1.1" 305 [27/Apr/2022:20:41:44 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /login HTTP/1.1" 305 [27/Apr/2022:20:41:47 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /jenkins/login HTTP/1.1" 312 [27/Apr/2022:20:41:50 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /manager/html HTTP/1.1" 308 [27/Apr/2022:20:41:52 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /wp-login.php HTTP/1.1" 311 [27/Apr/2022:20:41:55 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=m4cdcb5a HTTP/1.1" 382 [27/Apr/2022:20:41:56 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /users/sign_in HTTP/1.1" 311 [27/Apr/2022:20:41:58 +0200] 203.162.115.68 TLSv1.2 AES256-SHA "GET /actuator/env HTTP/1.1" 309 [27/Apr/2022:20:44:16 +0200] 80.82.78.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Apr/2022:20:55:10 +0200] 139.162.200.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Apr/2022:21:47:50 +0200] 193.56.29.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [27/Apr/2022:21:47:50 +0200] 193.56.29.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [27/Apr/2022:23:25:44 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [28/Apr/2022:00:31:06 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [28/Apr/2022:01:18:48 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [28/Apr/2022:01:28:33 +0200] 172.245.10.242 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /GponForm/diag_Form?style/ HTTP/1.1" 406 [28/Apr/2022:01:43:13 +0200] 213.226.123.30 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390