[02/Jul/2022:02:01:53 +0200] 128.14.209.154 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 297 [02/Jul/2022:02:05:55 +0200] 207.154.195.123 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:02:57:22 +0200] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [02/Jul/2022:02:57:23 +0200] 40.77.167.98 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [02/Jul/2022:02:57:28 +0200] 157.55.39.27 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [02/Jul/2022:03:15:30 +0200] 104.206.128.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [02/Jul/2022:03:35:20 +0200] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [02/Jul/2022:04:00:17 +0200] 192.241.223.25 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [02/Jul/2022:04:26:34 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [02/Jul/2022:04:36:02 +0200] 192.241.213.75 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:04:45:59 +0200] 154.209.125.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [02/Jul/2022:05:55:00 +0200] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Jul/2022:06:27:54 +0200] 35.87.175.95 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/logon.aspx HTTP/1.1" 402 [02/Jul/2022:08:30:40 +0200] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [02/Jul/2022:09:29:31 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [02/Jul/2022:09:29:32 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [02/Jul/2022:09:29:33 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [02/Jul/2022:09:29:34 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [02/Jul/2022:09:29:35 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [02/Jul/2022:09:29:35 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [02/Jul/2022:09:29:36 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [02/Jul/2022:09:29:37 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [02/Jul/2022:09:40:44 +0200] 185.186.143.111 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 349 [02/Jul/2022:10:38:39 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /environments/.credentials HTTP/1.1" 310 [02/Jul/2022:10:38:40 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /environments/.credentials HTTP/1.1" 310 [02/Jul/2022:11:44:41 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:12:27:48 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [02/Jul/2022:12:30:44 +0200] 20.26.237.216 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [02/Jul/2022:13:25:25 +0200] 64.62.197.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Jul/2022:14:02:15 +0200] 192.241.221.14 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [02/Jul/2022:14:02:41 +0200] 192.241.222.24 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [02/Jul/2022:14:03:02 +0200] 192.241.221.222 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [02/Jul/2022:14:42:21 +0200] 66.240.192.82 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:14:54:52 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [02/Jul/2022:15:11:51 +0200] 157.55.39.97 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [02/Jul/2022:15:32:06 +0200] 223.71.167.165 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [02/Jul/2022:15:34:51 +0200] 167.248.133.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Jul/2022:15:34:51 +0200] 167.248.133.117 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:15:34:52 +0200] 167.248.133.117 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [02/Jul/2022:15:36:40 +0200] 192.241.216.12 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [02/Jul/2022:16:02:25 +0200] 18.234.236.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Jul/2022:16:18:43 +0200] 45.134.144.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [02/Jul/2022:17:13:36 +0200] 192.241.221.63 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [02/Jul/2022:17:27:35 +0200] 31.222.238.247 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /login/ HTTP/1.1" 305 [02/Jul/2022:18:24:43 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [02/Jul/2022:18:46:39 +0200] 106.75.218.140 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [02/Jul/2022:18:54:58 +0200] 27.124.41.163 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 305 [02/Jul/2022:19:06:02 +0200] 20.26.237.216 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [02/Jul/2022:19:51:32 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "-" - [02/Jul/2022:20:08:42 +0200] 221.2.163.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:20:39:28 +0200] 193.46.255.26 - - "-" - [02/Jul/2022:20:49:05 +0200] 138.68.13.81 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Jul/2022:20:58:33 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /environments/.aws/.credentials HTTP/1.1" 312 [02/Jul/2022:20:58:34 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /environments/.aws/.credentials HTTP/1.1" 312 [02/Jul/2022:21:43:20 +0200] 212.71.255.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Jul/2022:21:53:20 +0200] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [02/Jul/2022:22:07:13 +0200] 154.89.5.80 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [02/Jul/2022:23:20:03 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [02/Jul/2022:23:20:03 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [02/Jul/2022:23:20:07 +0200] 162.142.125.219 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Jul/2022:23:20:08 +0200] 162.142.125.219 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:23:20:09 +0200] 162.142.125.219 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [02/Jul/2022:23:29:16 +0200] 35.88.203.195 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Jul/2022:23:29:43 +0200] 54.184.166.153 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [02/Jul/2022:23:29:47 +0200] 54.184.166.153 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Jul/2022:23:50:33 +0200] 103.203.57.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Jul/2022:23:56:17 +0200] 52.173.147.112 TLSv1.2 AES256-SHA "POST /wp-plain.php HTTP/1.1" 406 [02/Jul/2022:23:56:18 +0200] 52.173.147.112 TLSv1.2 AES256-SHA "GET /htkhfojr.php?Fox=d3wL7 HTTP/1.1" 416 [03/Jul/2022:01:41:35 +0200] 175.100.20.202 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [03/Jul/2022:01:41:37 +0200] 175.100.20.202 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301