[12/Jun/2022:02:29:27 +0200] 194.5.73.5 TLSv1.2 AES256-SHA "POST /userportal/Controller?mode=8700&operation=1&datagrid=179&json={\"\xf0\x9f\x8f\x93\":\"dutch-institute-for-vulnerability-disclosure_non-intrusive-check\"} HTTP/1.1" 422 [12/Jun/2022:02:52:49 +0200] 198.235.24.29 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [12/Jun/2022:03:47:41 +0200] 192.241.220.196 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [12/Jun/2022:04:00:54 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [12/Jun/2022:04:16:23 +0200] 192.241.221.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:05:06:18 +0200] 131.220.6.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [12/Jun/2022:06:07:53 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [12/Jun/2022:06:07:54 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [12/Jun/2022:06:09:33 +0200] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [12/Jun/2022:06:17:12 +0200] 198.235.24.153 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [12/Jun/2022:06:38:57 +0200] 88.99.3.235 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 325 [12/Jun/2022:06:39:46 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [12/Jun/2022:07:07:14 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [12/Jun/2022:07:07:15 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Jun/2022:07:07:22 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts HTTP/1.1" 293 [12/Jun/2022:07:07:22 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /.DS_Store HTTP/1.1" 307 [12/Jun/2022:07:07:23 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /config.json HTTP/1.1" 311 [12/Jun/2022:07:07:24 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 304 [12/Jun/2022:07:07:24 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [12/Jun/2022:07:07:25 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 311 [12/Jun/2022:07:07:26 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /info.php HTTP/1.1" 307 [12/Jun/2022:07:07:26 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /.json HTTP/1.1" 305 [12/Jun/2022:07:07:27 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /login.action HTTP/1.1" 311 [12/Jun/2022:07:07:27 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /server-status HTTP/1.1" 308 [12/Jun/2022:07:07:28 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /idx_config/ HTTP/1.1" 310 [12/Jun/2022:07:07:28 +0200] 34.65.197.10 TLSv1.2 AES256-SHA "GET /s/lkx/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 353 [12/Jun/2022:07:16:24 +0200] 207.154.215.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:07:51:16 +0200] 154.6.130.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [12/Jun/2022:08:15:21 +0200] 185.170.144.195 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [12/Jun/2022:08:40:56 +0200] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [12/Jun/2022:08:40:57 +0200] 40.77.167.104 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [12/Jun/2022:08:41:01 +0200] 157.55.39.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [12/Jun/2022:08:45:03 +0200] 78.129.132.73 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [12/Jun/2022:09:23:07 +0200] 202.102.144.122 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Jun/2022:10:21:40 +0200] 193.23.3.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Jun/2022:10:21:47 +0200] 193.23.3.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [12/Jun/2022:10:40:19 +0200] 146.190.29.121 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:11:31:04 +0200] 14.126.28.47 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388 [12/Jun/2022:11:31:05 +0200] 14.126.28.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:12:22:56 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [12/Jun/2022:12:22:57 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [12/Jun/2022:13:03:43 +0200] 68.183.147.50 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [12/Jun/2022:13:22:25 +0200] 167.94.146.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Jun/2022:13:22:25 +0200] 167.94.146.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:13:22:26 +0200] 167.94.146.58 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [12/Jun/2022:13:31:21 +0200] 192.241.221.43 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [12/Jun/2022:13:32:29 +0200] 192.241.223.11 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [12/Jun/2022:13:32:35 +0200] 192.241.221.20 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [12/Jun/2022:15:03:39 +0200] 74.82.47.3 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Jun/2022:20:22:56 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Jun/2022:20:22:57 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:20:22:58 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [12/Jun/2022:21:58:47 +0200] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [12/Jun/2022:21:58:48 +0200] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [12/Jun/2022:21:58:49 +0200] 167.248.133.45 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [12/Jun/2022:22:24:21 +0200] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [12/Jun/2022:23:07:25 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [12/Jun/2022:23:07:26 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [12/Jun/2022:23:07:26 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [12/Jun/2022:23:07:27 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [12/Jun/2022:23:07:27 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [12/Jun/2022:23:07:28 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [12/Jun/2022:23:07:28 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [12/Jun/2022:23:07:29 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [12/Jun/2022:23:07:29 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws HTTP/1.1" 304 [12/Jun/2022:23:07:30 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws HTTP/1.1" 304 [12/Jun/2022:23:07:30 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309 [12/Jun/2022:23:07:31 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.env HTTP/1.1" 309 [12/Jun/2022:23:07:31 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws/credentials HTTP/1.1" 316 [12/Jun/2022:23:07:32 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws/credentials HTTP/1.1" 316 [12/Jun/2022:23:07:32 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [12/Jun/2022:23:07:33 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [12/Jun/2022:23:07:33 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/aws/credentials HTTP/1.1" 316 [12/Jun/2022:23:07:34 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/aws/credentials HTTP/1.1" 316 [12/Jun/2022:23:07:34 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws HTTP/1.1" 309 [12/Jun/2022:23:07:35 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws HTTP/1.1" 309 [12/Jun/2022:23:17:30 +0200] 34.220.63.100 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Jun/2022:23:19:29 +0200] 52.36.178.178 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [12/Jun/2022:23:26:15 +0200] 35.160.188.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [12/Jun/2022:23:26:36 +0200] 34.222.28.0 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [13/Jun/2022:00:38:43 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [13/Jun/2022:00:56:20 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 296 [13/Jun/2022:01:07:32 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [13/Jun/2022:01:29:47 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /storage/logs/laravel.log HTTP/1.1" 312 [13/Jun/2022:01:29:47 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 340 [13/Jun/2022:01:29:48 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [13/Jun/2022:01:29:48 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /laravel-filemanager?type=Files HTTP/1.1" 318 [13/Jun/2022:01:29:48 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /_ignition/health-check HTTP/1.1" 312 [13/Jun/2022:01:30:25 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 308 [13/Jun/2022:01:31:41 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /_ignition/health-check HTTP/1.1" 311 [13/Jun/2022:01:31:41 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 296 [13/Jun/2022:01:31:41 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /storage/logs/laravel.log HTTP/1.1" 312 [13/Jun/2022:01:31:41 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /laravel-filemanager?type=Files HTTP/1.1" 317 [13/Jun/2022:01:31:41 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /_ignition/scripts/--%3E%3Csvg%20onload=alert%28document.domain%29%3E HTTP/1.1" 339 [13/Jun/2022:01:32:09 +0200] 172.81.129.26 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 308 [13/Jun/2022:01:50:07 +0200] 128.14.133.58 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301