[24/Jul/2022:02:09:38 +0200] 35.90.220.83 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Jul/2022:02:11:22 +0200] 34.212.226.57 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [24/Jul/2022:03:16:02 +0200] 51.158.108.77 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [24/Jul/2022:03:45:21 +0200] 157.55.39.210 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [24/Jul/2022:03:45:23 +0200] 157.55.39.210 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 311 [24/Jul/2022:03:45:27 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [24/Jul/2022:04:13:37 +0200] 192.241.221.86 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [24/Jul/2022:04:30:01 +0200] 216.131.114.78 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [24/Jul/2022:04:54:32 +0200] 192.241.205.143 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:05:00:24 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:05:38:43 +0200] 34.76.158.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Jul/2022:05:57:13 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [24/Jul/2022:06:47:42 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [24/Jul/2022:06:50:34 +0200] 51.15.251.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [24/Jul/2022:07:38:23 +0200] 81.30.253.134 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@foo.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3f@foo.com HTTP/1.1" 353 [24/Jul/2022:07:45:08 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [24/Jul/2022:08:09:28 +0200] 167.94.138.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Jul/2022:08:09:28 +0200] 167.94.138.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:08:09:29 +0200] 167.94.138.47 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [24/Jul/2022:09:05:17 +0200] 198.235.24.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [24/Jul/2022:09:09:53 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [24/Jul/2022:10:02:17 +0200] 35.209.115.170 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [24/Jul/2022:10:10:06 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [24/Jul/2022:11:03:31 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [24/Jul/2022:11:18:29 +0200] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Jul/2022:13:24:04 +0200] 192.241.221.233 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [24/Jul/2022:13:25:34 +0200] 192.241.219.213 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [24/Jul/2022:13:25:35 +0200] 192.241.221.43 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [24/Jul/2022:14:32:55 +0200] 222.186.21.231 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Jul/2022:15:45:12 +0200] 128.14.134.170 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [24/Jul/2022:16:13:54 +0200] 64.62.197.197 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Jul/2022:16:14:38 +0200] 52.142.199.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [24/Jul/2022:16:14:39 +0200] 52.142.199.164 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [24/Jul/2022:16:24:45 +0200] 64.62.197.197 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [24/Jul/2022:16:29:29 +0200] 64.62.197.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:17:24:35 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [24/Jul/2022:18:19:16 +0200] 43.134.234.251 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:19:00:34 +0200] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:19:18:04 +0200] 162.142.125.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [24/Jul/2022:19:18:05 +0200] 162.142.125.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [24/Jul/2022:19:18:05 +0200] 162.142.125.211 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [24/Jul/2022:20:58:12 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [24/Jul/2022:20:58:13 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298 [24/Jul/2022:20:58:15 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 304 [24/Jul/2022:20:58:16 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 304 [24/Jul/2022:20:58:17 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 303 [24/Jul/2022:20:58:18 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 303 [24/Jul/2022:20:58:19 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 304 [24/Jul/2022:20:58:19 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 304 [24/Jul/2022:20:58:20 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 302 [24/Jul/2022:20:58:22 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 302 [24/Jul/2022:21:44:34 +0200] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [24/Jul/2022:23:43:09 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [25/Jul/2022:01:27:13 +0200] 35.91.48.241 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [25/Jul/2022:01:27:54 +0200] 34.220.155.114 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313 [25/Jul/2022:01:27:56 +0200] 34.220.155.114 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [25/Jul/2022:01:37:16 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327