[31/May/2022:02:42:40 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [31/May/2022:03:16:41 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [31/May/2022:03:22:48 +0200] 198.235.24.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [31/May/2022:03:29:17 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /php_info.php HTTP/1.1" 316 [31/May/2022:03:29:18 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /php_info.php HTTP/1.1" 316 [31/May/2022:03:39:05 +0200] 192.241.220.128 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [31/May/2022:04:17:12 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/May/2022:04:51:13 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [31/May/2022:05:13:01 +0200] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 400 [31/May/2022:05:14:19 +0200] 192.241.212.93 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [31/May/2022:06:39:16 +0200] 89.248.165.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 298 [31/May/2022:06:43:17 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [31/May/2022:07:26:53 +0200] 192.241.220.156 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/May/2022:07:40:06 +0200] 154.89.5.74 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [31/May/2022:08:30:10 +0200] 65.49.20.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [31/May/2022:09:42:58 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [31/May/2022:11:22:18 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [31/May/2022:11:22:18 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [31/May/2022:13:30:00 +0200] 192.241.214.157 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [31/May/2022:13:30:53 +0200] 192.241.220.215 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [31/May/2022:13:32:05 +0200] 192.241.221.233 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [31/May/2022:14:32:54 +0200] 178.79.153.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [31/May/2022:14:38:43 +0200] 103.203.57.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [31/May/2022:15:31:21 +0200] 208.100.26.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [31/May/2022:15:35:46 +0200] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 389 [31/May/2022:15:44:41 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/May/2022:16:36:28 +0200] 106.75.25.168 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [31/May/2022:16:36:47 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [31/May/2022:17:52:29 +0200] 185.180.143.136 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [31/May/2022:18:10:03 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [31/May/2022:18:15:17 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [31/May/2022:19:42:05 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [31/May/2022:19:45:54 +0200] 167.248.133.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/May/2022:19:45:55 +0200] 167.248.133.47 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [31/May/2022:20:30:16 +0200] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/May/2022:20:57:03 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [31/May/2022:21:06:41 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [31/May/2022:21:41:42 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [31/May/2022:22:22:09 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [31/May/2022:22:30:16 +0200] 192.64.113.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [31/May/2022:23:32:06 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [01/Jun/2022:00:12:41 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jun/2022:00:43:33 +0200] 164.90.174.17 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [01/Jun/2022:00:51:19 +0200] 109.248.6.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.0" 399 [01/Jun/2022:01:20:47 +0200] 20.204.74.136 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Jun/2022:01:35:51 +0200] 193.106.191.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Jun/2022:01:55:19 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393