[23/Jun/2022:03:40:02 +0200] 103.203.57.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [23/Jun/2022:03:43:58 +0200] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jun/2022:03:44:03 +0200] 154.22.135.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [23/Jun/2022:03:53:15 +0200] 192.241.213.6 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [23/Jun/2022:04:24:01 +0200] 192.241.219.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jun/2022:04:42:47 +0200] 208.100.26.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [23/Jun/2022:04:43:09 +0200] 109.74.196.99 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [23/Jun/2022:06:18:16 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [23/Jun/2022:06:27:13 +0200] 119.90.62.42 TLSv1.2 AES256-SHA "GET /dqgqoeCXckuwPtxov HTTP/1.1" 400 [23/Jun/2022:06:27:21 +0200] 119.90.62.42 TLSv1.2 AES256-SHA "GET /dqgqoeCXckuwPtxov HTTP/1.1" 400 [23/Jun/2022:06:54:07 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [23/Jun/2022:06:54:10 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [23/Jun/2022:06:54:15 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [23/Jun/2022:06:54:17 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [23/Jun/2022:06:54:20 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [23/Jun/2022:06:54:23 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [23/Jun/2022:06:54:27 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [23/Jun/2022:06:54:29 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [23/Jun/2022:06:54:33 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [23/Jun/2022:06:54:37 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [23/Jun/2022:06:54:41 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws HTTP/1.1" 304 [23/Jun/2022:06:54:44 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws HTTP/1.1" 304 [23/Jun/2022:06:54:48 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309 [23/Jun/2022:06:54:51 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.env HTTP/1.1" 309 [23/Jun/2022:06:54:55 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws/credentials HTTP/1.1" 316 [23/Jun/2022:06:54:58 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws/credentials HTTP/1.1" 316 [23/Jun/2022:06:55:02 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [23/Jun/2022:06:55:05 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [23/Jun/2022:06:55:08 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/aws/credentials HTTP/1.1" 316 [23/Jun/2022:06:55:12 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/aws/credentials HTTP/1.1" 316 [23/Jun/2022:06:55:14 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws HTTP/1.1" 309 [23/Jun/2022:06:55:17 +0200] 109.237.100.22 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws HTTP/1.1" 309 [23/Jun/2022:07:11:54 +0200] 199.16.157.182 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [23/Jun/2022:07:11:55 +0200] 199.16.157.182 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [23/Jun/2022:07:52:23 +0200] 185.189.182.234 TLSv1.2 AES256-SHA "GET /nJt0 HTTP/1.1" 379 [23/Jun/2022:07:53:32 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jun/2022:08:18:29 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [23/Jun/2022:09:16:03 +0200] 157.55.39.27 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [23/Jun/2022:09:16:42 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jun/2022:10:03:03 +0200] 154.209.125.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [23/Jun/2022:10:20:55 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [23/Jun/2022:11:47:59 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [23/Jun/2022:12:10:11 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [23/Jun/2022:12:22:23 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [23/Jun/2022:12:55:33 +0200] 192.241.214.157 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [23/Jun/2022:12:56:25 +0200] 192.241.221.43 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [23/Jun/2022:12:56:38 +0200] 192.241.223.11 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [23/Jun/2022:13:19:21 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [23/Jun/2022:13:34:14 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [23/Jun/2022:13:42:18 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [23/Jun/2022:14:24:24 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [23/Jun/2022:14:29:01 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [23/Jun/2022:15:04:30 +0200] 184.105.247.195 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [23/Jun/2022:16:09:04 +0200] 172.105.137.94 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Jun/2022:16:46:44 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [23/Jun/2022:16:46:45 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [23/Jun/2022:17:58:35 +0200] 182.161.66.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [23/Jun/2022:18:46:47 +0200] 157.55.39.27 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [23/Jun/2022:20:37:36 +0200] 92.255.85.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [23/Jun/2022:20:51:41 +0200] 174.138.60.105 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [23/Jun/2022:20:51:42 +0200] 174.138.60.105 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [23/Jun/2022:20:51:44 +0200] 174.138.60.105 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [23/Jun/2022:21:26:04 +0200] 13.89.48.118 TLSv1.2 AES256-SHA "GET /phpmyadmin/index.php HTTP/1.1" 313 [23/Jun/2022:23:48:32 +0200] 45.33.96.205 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Jun/2022:00:17:01 +0200] 45.33.88.230 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jun/2022:01:10:11 +0200] 193.118.53.202 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Jun/2022:01:21:41 +0200] 43.156.25.237 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jun/2022:01:23:41 +0200] 212.71.255.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Jun/2022:01:35:06 +0200] 159.203.109.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Jun/2022:01:35:08 +0200] 159.203.109.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [24/Jun/2022:01:35:10 +0200] 159.203.109.243 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [24/Jun/2022:01:35:52 +0200] 192.241.215.236 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310