[06/Sep/2022:02:50:53 +0200] 157.245.176.143 TLSv1.2 AES256-SHA "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925 [06/Sep/2022:04:00:56 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [06/Sep/2022:04:51:31 +0200] 103.149.192.163 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [06/Sep/2022:05:16:41 +0200] 192.241.197.147 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [06/Sep/2022:07:17:33 +0200] 179.43.175.140 TLSv1.2 AES256-SHA "GET /static../.git/config HTTP/1.1" 314 [06/Sep/2022:07:53:58 +0200] 198.235.24.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [06/Sep/2022:08:45:07 +0200] 198.199.93.232 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [06/Sep/2022:10:15:28 +0200] 205.210.31.176 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [06/Sep/2022:11:22:21 +0200] 193.118.53.194 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [06/Sep/2022:11:55:46 +0200] 192.241.210.182 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [06/Sep/2022:11:58:08 +0200] 192.241.208.155 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [06/Sep/2022:11:58:24 +0200] 192.241.220.206 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [06/Sep/2022:13:06:51 +0200] 205.210.31.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [06/Sep/2022:13:25:34 +0200] 152.89.196.62 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [06/Sep/2022:14:49:05 +0200] 128.1.248.42 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [06/Sep/2022:14:58:30 +0200] 154.89.5.203 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [06/Sep/2022:16:55:16 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [06/Sep/2022:17:12:09 +0200] 54.91.114.252 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [06/Sep/2022:17:37:58 +0200] 139.162.200.4 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [06/Sep/2022:18:40:41 +0200] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [06/Sep/2022:18:47:56 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [06/Sep/2022:18:47:58 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 298 [06/Sep/2022:18:48:00 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 304 [06/Sep/2022:18:48:01 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 304 [06/Sep/2022:18:48:03 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 303 [06/Sep/2022:18:48:06 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 303 [06/Sep/2022:18:48:07 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 304 [06/Sep/2022:18:48:09 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 304 [06/Sep/2022:18:48:11 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 302 [06/Sep/2022:18:48:13 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 302 [06/Sep/2022:18:48:14 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 300 [06/Sep/2022:18:48:16 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 300 [06/Sep/2022:18:48:17 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 303 [06/Sep/2022:18:48:18 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 303 [06/Sep/2022:18:48:20 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 301 [06/Sep/2022:18:48:21 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 301 [06/Sep/2022:18:48:23 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 300 [06/Sep/2022:18:48:25 +0200] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 300 [06/Sep/2022:18:48:58 +0200] 64.62.197.152 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [06/Sep/2022:18:57:09 +0200] 64.62.197.152 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [06/Sep/2022:19:00:04 +0200] 180.149.125.168 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [06/Sep/2022:19:01:02 +0200] 64.62.197.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [06/Sep/2022:21:24:14 +0200] 198.235.24.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 386 [06/Sep/2022:22:40:30 +0200] 198.235.24.139 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [06/Sep/2022:23:03:27 +0200] 23.251.102.74 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [06/Sep/2022:23:19:27 +0200] 83.136.32.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.0" - [06/Sep/2022:23:31:28 +0200] 192.241.213.189 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [07/Sep/2022:00:56:51 +0200] 34.76.96.55 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [07/Sep/2022:00:58:12 +0200] 35.89.135.52 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [07/Sep/2022:01:01:17 +0200] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [07/Sep/2022:01:56:14 +0200] 128.14.134.134 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 301 [07/Sep/2022:01:59:04 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/.credentials.php HTTP/1.1" 321 [07/Sep/2022:01:59:04 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/.credentials.php HTTP/1.1" 321