[26/Aug/2022:02:26:21 +0200] 142.93.199.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Aug/2022:02:30:01 +0200] 52.13.46.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [26/Aug/2022:02:30:14 +0200] 35.92.5.183 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [26/Aug/2022:02:30:17 +0200] 35.92.5.183 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 424 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1661475103 HTTP/1.1" 407 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/HEAD HTTP/1.1" 392 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /n3sH HTTP/1.1" 387 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal0000.htm HTTP/1.1" 397 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /CSS/Miniweb.css HTTP/1.1" 398 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /scripts/WPnBr.dll HTTP/1.1" 400 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 424 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools/default/buckets HTTP/1.1" 404 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 396 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /base.inc HTTP/1.1" 391 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /__Additional HTTP/1.1" 395 [26/Aug/2022:02:51:43 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [26/Aug/2022:02:51:44 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Aug/2022:02:51:44 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools HTTP/1.1" 388 [26/Aug/2022:02:51:44 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925 [26/Aug/2022:02:51:44 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal/Portal.mwsl HTTP/1.1" 401 [26/Aug/2022:02:51:44 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /main.aspx HTTP/1.1" 392 [26/Aug/2022:02:51:45 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [26/Aug/2022:02:51:45 +0200] 195.96.137.2 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Aug/2022:03:03:51 +0200] 165.22.56.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Aug/2022:03:03:53 +0200] 165.22.56.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [26/Aug/2022:03:25:46 +0200] 94.232.45.12 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Aug/2022:03:49:01 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [26/Aug/2022:04:49:31 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Aug/2022:05:00:56 +0200] 192.241.221.137 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [26/Aug/2022:05:03:34 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Aug/2022:05:03:34 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [26/Aug/2022:05:03:35 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [26/Aug/2022:05:03:35 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [26/Aug/2022:05:03:36 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [26/Aug/2022:05:03:37 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [26/Aug/2022:05:03:37 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [26/Aug/2022:05:03:37 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [26/Aug/2022:05:03:38 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [26/Aug/2022:05:03:38 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [26/Aug/2022:05:03:39 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308 [26/Aug/2022:05:03:39 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308 [26/Aug/2022:05:03:40 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310 [26/Aug/2022:05:03:40 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310 [26/Aug/2022:05:03:41 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307 [26/Aug/2022:05:03:41 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307 [26/Aug/2022:05:03:42 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /js/app.js HTTP/1.1" 308 [26/Aug/2022:05:03:42 +0200] 109.237.103.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /js/app.js HTTP/1.1" 308 [26/Aug/2022:05:14:18 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/Aug/2022:05:39:00 +0200] 162.142.125.121 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:05:39:00 +0200] 162.142.125.121 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/Aug/2022:05:44:45 +0200] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [26/Aug/2022:05:47:06 +0200] 192.241.212.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:07:08:33 +0200] 198.235.24.166 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [26/Aug/2022:07:17:03 +0200] 208.100.26.248 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298 [26/Aug/2022:08:56:27 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Aug/2022:09:16:55 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Aug/2022:09:17:12 +0200] 143.92.32.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [26/Aug/2022:09:19:07 +0200] 185.180.143.81 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/Aug/2022:09:43:49 +0200] 43.128.227.146 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:09:45:35 +0200] 185.189.182.234 TLSv1.2 AES256-SHA "GET /Ejs: HTTP/1.1" 379 [26/Aug/2022:11:15:05 +0200] 38.70.11.110 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Aug/2022:11:15:05 +0200] 38.70.11.110 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [26/Aug/2022:11:49:43 +0200] 192.241.236.6 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [26/Aug/2022:11:51:52 +0200] 192.241.236.133 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [26/Aug/2022:11:51:53 +0200] 192.241.236.169 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [26/Aug/2022:12:03:14 +0200] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/Aug/2022:12:39:13 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [26/Aug/2022:12:50:39 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Aug/2022:13:11:37 +0200] 54.36.148.199 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 315 [26/Aug/2022:13:11:38 +0200] 54.36.149.49 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 308 [26/Aug/2022:13:28:39 +0200] 104.248.195.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:13:47:26 +0200] 76.72.172.170 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [26/Aug/2022:15:10:02 +0200] 167.172.189.105 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Aug/2022:15:52:15 +0200] 193.118.53.194 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/Aug/2022:15:56:56 +0200] 89.248.165.84 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/public/index.html HTTP/1.1" 406 [26/Aug/2022:16:34:18 +0200] 192.241.209.114 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [26/Aug/2022:16:49:14 +0200] 45.155.126.4 TLSv1.2 AES256-SHA "-" - [26/Aug/2022:16:59:14 +0200] 89.248.165.84 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/dm-launcher.msi HTTP/1.1" 404 [26/Aug/2022:17:02:56 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:17:24:25 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /dashboard.html HTTP/1.1" 310 [26/Aug/2022:17:24:30 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /installer-log.txt HTTP/1.1" 314 [26/Aug/2022:17:24:35 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /wp-admin/install.php HTTP/1.1" 314 [26/Aug/2022:17:25:12 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /apache.conf HTTP/1.1" 308 [26/Aug/2022:17:25:14 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /nginx.conf HTTP/1.1" 310 [26/Aug/2022:17:25:18 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "OPTIONS / HTTP/1.1" 301 [26/Aug/2022:17:25:24 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /xmlrpc.php HTTP/1.1" 309 [26/Aug/2022:17:32:19 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Aug/2022:17:33:15 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /jkstatus HTTP/1.1" 307 [26/Aug/2022:17:33:15 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /jkstatus; HTTP/1.1" 309 [26/Aug/2022:17:41:46 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /access.log HTTP/1.1" 308 [26/Aug/2022:17:41:46 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /log/access.log HTTP/1.1" 310 [26/Aug/2022:17:41:47 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /logs/access.log HTTP/1.1" 311 [26/Aug/2022:17:41:47 +0200] 3.71.134.149 TLSv1.2 AES256-SHA "GET /application/logs/access.log HTTP/1.1" 319 [26/Aug/2022:17:56:59 +0200] 178.79.169.97 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [26/Aug/2022:18:01:38 +0200] 103.149.192.155 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:18:18:27 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Aug/2022:18:39:07 +0200] 162.142.125.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Aug/2022:18:39:08 +0200] 162.142.125.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:18:39:09 +0200] 162.142.125.9 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/Aug/2022:19:48:52 +0200] 106.75.10.105 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [26/Aug/2022:20:04:55 +0200] 185.180.143.71 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/Aug/2022:20:05:10 +0200] 185.180.143.71 TLSv1.2 DHE-RSA-AES256-SHA256 "GET /webfig/ HTTP/1.1" 307 [26/Aug/2022:20:16:35 +0200] 205.210.31.138 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [26/Aug/2022:21:01:58 +0200] 128.14.209.162 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [26/Aug/2022:21:30:03 +0200] 103.80.134.188 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Aug/2022:21:36:29 +0200] 103.80.134.188 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1661542569 HTTP/1.1" 407 [26/Aug/2022:21:36:54 +0200] 205.185.115.33 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Aug/2022:22:14:18 +0200] 20.199.20.207 TLSv1.2 AES256-SHA "POST /wp-plain.php HTTP/1.1" 397 [26/Aug/2022:22:14:18 +0200] 20.199.20.207 TLSv1.2 AES256-SHA "GET /vrwzmzsc.php?Fox=d3wL7 HTTP/1.1" 407 [26/Aug/2022:22:21:39 +0200] 92.53.65.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Aug/2022:23:24:42 +0200] 35.91.77.0 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/Aug/2022:23:25:20 +0200] 34.219.67.64 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [26/Aug/2022:23:25:27 +0200] 34.219.67.64 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/Aug/2022:23:26:36 +0200] 54.214.85.254 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [27/Aug/2022:00:22:25 +0200] 140.246.252.211 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.0" 388 [27/Aug/2022:00:22:30 +0200] 140.246.252.211 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Aug/2022:00:22:47 +0200] 140.246.252.211 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Aug/2022:00:23:21 +0200] 140.246.252.211 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Aug/2022:00:52:53 +0200] 128.1.248.26 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [27/Aug/2022:01:02:54 +0200] 45.95.147.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Aug/2022:01:02:55 +0200] 45.95.147.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sssss HTTP/1.1" 303 [27/Aug/2022:01:11:30 +0200] 34.78.6.216 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Aug/2022:01:21:04 +0200] 85.215.209.170 TLSv1.2 AES256-SHA "GET /manager/html HTTP/1.1" 308