[08/Aug/2022:02:38:56 +0200] 109.205.213.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:02:39:12 +0200] 45.83.245.167 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:02:56:30 +0200] 154.89.5.115 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [08/Aug/2022:02:57:31 +0200] 71.6.232.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:04:20:52 +0200] 198.199.93.172 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [08/Aug/2022:04:37:24 +0200] 109.205.213.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:04:37:25 +0200] 45.83.245.167 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:04:55:58 +0200] 205.210.31.156 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [08/Aug/2022:04:56:46 +0200] 179.43.154.200 TLSv1.2 AES256-SHA "GET /s3cmd.ini HTTP/1.1" 308 [08/Aug/2022:05:04:37 +0200] 192.241.213.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:05:37:52 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [08/Aug/2022:05:37:56 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /webfig/ HTTP/1.1" 307 [08/Aug/2022:05:50:45 +0200] 34.76.158.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [08/Aug/2022:07:52:50 +0200] 159.65.116.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:08:00:49 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [08/Aug/2022:08:43:04 +0200] 179.43.154.200 TLSv1.2 AES256-SHA "GET /.git/credentials HTTP/1.1" 311 [08/Aug/2022:09:48:48 +0200] 18.144.162.31 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [08/Aug/2022:10:20:07 +0200] 109.205.213.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:10:20:23 +0200] 45.83.245.167 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:10:23:34 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [08/Aug/2022:10:23:35 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:10:23:35 +0200] 162.142.125.8 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [08/Aug/2022:11:06:23 +0200] 167.94.146.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [08/Aug/2022:11:06:23 +0200] 167.94.146.59 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:11:06:23 +0200] 167.94.146.59 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [08/Aug/2022:11:39:05 +0200] 192.241.235.162 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [08/Aug/2022:11:41:17 +0200] 192.241.235.175 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [08/Aug/2022:11:41:18 +0200] 192.241.235.227 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [08/Aug/2022:11:54:30 +0200] 109.205.213.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:11:54:45 +0200] 45.83.245.167 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:12:01:16 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [08/Aug/2022:12:31:22 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.html HTTP/1.1" 303 [08/Aug/2022:12:31:22 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo.html HTTP/1.1" 303 [08/Aug/2022:14:38:11 +0200] 184.105.139.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [08/Aug/2022:14:44:08 +0200] 184.105.139.70 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [08/Aug/2022:14:45:51 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [08/Aug/2022:14:49:35 +0200] 184.105.139.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:14:59:28 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [08/Aug/2022:15:41:45 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:15:55:25 +0200] 192.241.222.13 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [08/Aug/2022:16:09:56 +0200] 107.21.60.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [08/Aug/2022:16:19:48 +0200] 162.221.192.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /solr/ HTTP/1.1" 304 [08/Aug/2022:16:35:04 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [08/Aug/2022:16:35:05 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298 [08/Aug/2022:16:35:06 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 304 [08/Aug/2022:16:35:07 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 304 [08/Aug/2022:16:35:08 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 303 [08/Aug/2022:16:35:09 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 303 [08/Aug/2022:16:35:11 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 304 [08/Aug/2022:16:35:12 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 304 [08/Aug/2022:16:35:13 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 302 [08/Aug/2022:16:35:14 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 302 [08/Aug/2022:16:35:15 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 300 [08/Aug/2022:16:35:16 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 300 [08/Aug/2022:16:52:21 +0200] 179.43.154.200 TLSv1.2 AES256-SHA "GET /.aws/credentials HTTP/1.1" 311 [08/Aug/2022:17:16:44 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [08/Aug/2022:17:34:01 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws.yml HTTP/1.1" 300 [08/Aug/2022:17:34:02 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws.yml HTTP/1.1" 300 [08/Aug/2022:18:40:13 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [08/Aug/2022:19:13:31 +0200] 185.81.157.172 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [08/Aug/2022:19:13:36 +0200] 185.81.157.172 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [08/Aug/2022:20:10:55 +0200] 185.7.214.104 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [08/Aug/2022:20:39:18 +0200] 185.99.135.148 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [08/Aug/2022:20:54:26 +0200] 193.118.53.194 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [08/Aug/2022:22:32:57 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [08/Aug/2022:22:35:25 +0200] 179.43.154.200 TLSv1.2 AES256-SHA "GET /.gitlab-ci.yml HTTP/1.1" 311 [08/Aug/2022:23:11:50 +0200] 66.249.65.112 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [08/Aug/2022:23:11:51 +0200] 66.249.65.110 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [08/Aug/2022:23:26:55 +0200] 179.43.155.171 TLSv1.2 AES256-SHA "GET /Dockerrun.aws.json HTTP/1.1" 314 [08/Aug/2022:23:55:02 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 424 [08/Aug/2022:23:55:02 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /TBRt HTTP/1.1" 387 [08/Aug/2022:23:55:03 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal0000.htm HTTP/1.1" 397 [08/Aug/2022:23:55:03 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal/Portal.mwsl HTTP/1.1" 401 [08/Aug/2022:23:55:06 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [08/Aug/2022:23:55:06 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [08/Aug/2022:23:55:12 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [08/Aug/2022:23:55:20 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [08/Aug/2022:23:55:34 +0200] 104.156.155.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [08/Aug/2022:23:55:40 +0200] 104.156.155.28 - - "-" - [09/Aug/2022:00:26:28 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [09/Aug/2022:00:50:59 +0200] 207.46.13.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [09/Aug/2022:01:54:16 +0200] 128.14.141.34 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301