[22/Jul/2022:02:42:58 +0200] 54.201.174.255 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[22/Jul/2022:02:43:27 +0200] 52.36.212.127 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[22/Jul/2022:02:58:33 +0200] 162.142.125.213 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[22/Jul/2022:02:58:34 +0200] 162.142.125.213 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jul/2022:02:58:34 +0200] 162.142.125.213 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[22/Jul/2022:03:30:04 +0200] 193.201.9.69 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[22/Jul/2022:03:45:15 +0200] 170.130.187.10 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[22/Jul/2022:03:55:41 +0200] 45.61.185.76 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ztp/cgi-bin/handler HTTP/1.1" 315
[22/Jul/2022:04:12:24 +0200] 192.241.220.204 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[22/Jul/2022:04:23:14 +0200] 167.248.133.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[22/Jul/2022:04:23:14 +0200] 167.248.133.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jul/2022:04:23:15 +0200] 167.248.133.44 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[22/Jul/2022:04:52:36 +0200] 192.241.219.148 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jul/2022:05:02:59 +0200] 164.92.158.185 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jul/2022:05:48:57 +0200] 130.211.54.158 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jul/2022:06:04:08 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[22/Jul/2022:06:21:23 +0200] 20.150.204.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310
[22/Jul/2022:07:52:39 +0200] 64.62.197.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[22/Jul/2022:08:02:48 +0200] 64.62.197.9 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[22/Jul/2022:08:06:45 +0200] 64.62.197.15 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jul/2022:08:15:59 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[22/Jul/2022:09:40:11 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[22/Jul/2022:10:25:10 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[22/Jul/2022:10:41:44 +0200] 139.162.240.220 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jul/2022:11:20:07 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[22/Jul/2022:11:46:05 +0200] 27.50.59.67 TLSv1.2 AES256-SHA "GET /d/201ED61C-D10D-41EB-A493-CD144BF13E5B.xm HTTP/1.1" 332
[22/Jul/2022:12:37:06 +0200] 45.95.147.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jul/2022:12:41:07 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[22/Jul/2022:13:31:45 +0200] 192.241.212.218 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[22/Jul/2022:13:32:38 +0200] 192.241.223.11 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[22/Jul/2022:13:34:19 +0200] 192.241.220.24 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[22/Jul/2022:13:56:17 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[22/Jul/2022:14:15:34 +0200] 185.186.143.111 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 349
[22/Jul/2022:15:17:24 +0200] 40.77.167.102 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 314
[22/Jul/2022:15:17:26 +0200] 40.77.167.102 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 314
[22/Jul/2022:15:17:35 +0200] 157.55.39.64 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[22/Jul/2022:15:34:07 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[22/Jul/2022:15:37:45 +0200] 40.76.200.187 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[22/Jul/2022:15:47:26 +0200] 193.201.9.69 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[22/Jul/2022:17:29:59 +0200] 128.199.230.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 374
[22/Jul/2022:18:32:38 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304
[22/Jul/2022:21:02:34 +0200] 198.235.24.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[22/Jul/2022:21:24:42 +0200] 81.30.253.134 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@foo.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3f@foo.com HTTP/1.1" 353
[22/Jul/2022:22:36:09 +0200] 178.73.215.171 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 388
[22/Jul/2022:22:36:31 +0200] 178.73.215.171 - - "-" -
[22/Jul/2022:22:36:33 +0200] 178.73.215.171 - - "-" -
[22/Jul/2022:22:36:38 +0200] 178.73.215.171 - - "-" -
[22/Jul/2022:22:36:41 +0200] 178.73.215.171 - - "-" -
[22/Jul/2022:23:14:06 +0200] 213.219.37.187 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[22/Jul/2022:23:27:18 +0200] 216.131.114.163 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[22/Jul/2022:23:40:07 +0200] 34.219.129.156 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[23/Jul/2022:00:01:49 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[23/Jul/2022:00:01:49 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[23/Jul/2022:00:01:50 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[23/Jul/2022:00:01:50 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[23/Jul/2022:00:01:51 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[23/Jul/2022:00:01:51 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[23/Jul/2022:00:01:52 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[23/Jul/2022:00:01:52 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[23/Jul/2022:00:01:53 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[23/Jul/2022:00:01:53 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[23/Jul/2022:00:01:54 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws HTTP/1.1" 304
[23/Jul/2022:00:01:54 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws HTTP/1.1" 304
[23/Jul/2022:00:01:55 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309
[23/Jul/2022:00:01:55 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.env HTTP/1.1" 309
[23/Jul/2022:00:01:55 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws/credentials HTTP/1.1" 316
[23/Jul/2022:00:01:56 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws/credentials HTTP/1.1" 316
[23/Jul/2022:00:01:56 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[23/Jul/2022:00:01:57 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[23/Jul/2022:00:01:57 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/aws/credentials HTTP/1.1" 316
[23/Jul/2022:00:01:58 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/aws/credentials HTTP/1.1" 316
[23/Jul/2022:00:01:58 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.aws HTTP/1.1" 309
[23/Jul/2022:00:01:59 +0200] 109.237.103.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.aws HTTP/1.1" 309
[23/Jul/2022:00:40:01 +0200] 198.235.24.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[23/Jul/2022:00:58:31 +0200] 20.199.50.247 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/luci HTTP/1.1" 395
[23/Jul/2022:01:24:10 +0200] 106.75.247.151 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383
[23/Jul/2022:01:28:21 +0200] 35.91.81.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[23/Jul/2022:01:28:52 +0200] 35.85.63.19 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313
[23/Jul/2022:01:28:55 +0200] 35.85.63.19 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306