[26/Sep/2022:02:38:08 +0200] 64.20.63.126 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:03:35:36 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:04:20:52 +0200] 13.81.25.221 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Sep/2022:04:20:52 +0200] 13.81.25.221 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [26/Sep/2022:04:38:40 +0200] 74.82.47.3 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Sep/2022:04:50:40 +0200] 74.82.47.3 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [26/Sep/2022:04:55:41 +0200] 95.216.167.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-includes/css/wp-config.php HTTP/1.1" 316 [26/Sep/2022:04:56:30 +0200] 74.82.47.55 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:05:51:44 +0200] 193.235.141.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [26/Sep/2022:06:02:50 +0200] 192.241.221.71 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [26/Sep/2022:06:37:42 +0200] 95.216.167.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-includes/css/wp-config.php HTTP/1.1" 315 [26/Sep/2022:07:13:46 +0200] 51.222.253.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 314 [26/Sep/2022:07:13:48 +0200] 51.222.253.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [26/Sep/2022:07:25:09 +0200] 71.6.232.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:08:46:14 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Sep/2022:08:59:42 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Sep/2022:09:35:58 +0200] 162.62.191.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [26/Sep/2022:09:48:17 +0200] 209.141.49.169 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:09:48:20 +0200] 209.141.51.222 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [26/Sep/2022:09:48:40 +0200] 209.141.49.169 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [26/Sep/2022:09:48:44 +0200] 205.185.122.184 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [26/Sep/2022:09:51:31 +0200] 192.241.221.28 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:10:37:15 +0200] 164.92.192.98 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:13:08:08 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Sep/2022:13:23:53 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [26/Sep/2022:14:29:54 +0200] 164.52.24.190 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Sep/2022:14:30:27 +0200] 164.52.24.190 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [26/Sep/2022:15:33:41 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [26/Sep/2022:16:00:08 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [26/Sep/2022:16:14:18 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:17:15:39 +0200] 45.72.48.130 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [26/Sep/2022:17:15:42 +0200] 45.72.48.130 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [26/Sep/2022:17:15:43 +0200] 45.72.48.130 TLSv1.2 AES256-SHA "GET /ads.txt HTTP/1.1" 300 [26/Sep/2022:17:37:59 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [26/Sep/2022:17:37:59 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/.env HTTP/1.1" 301 [26/Sep/2022:17:38:00 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-content/.env HTTP/1.1" 304 [26/Sep/2022:17:38:00 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-admin/.env HTTP/1.1" 304 [26/Sep/2022:17:38:01 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /library/.env HTTP/1.1" 303 [26/Sep/2022:17:38:02 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /new/.env HTTP/1.1" 300 [26/Sep/2022:17:38:02 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 302 [26/Sep/2022:17:38:03 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /old/.env HTTP/1.1" 300 [26/Sep/2022:17:38:03 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /local/.env HTTP/1.1" 302 [26/Sep/2022:17:38:04 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/.env HTTP/1.1" 300 [26/Sep/2022:17:38:05 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /blog/.env HTTP/1.1" 302 [26/Sep/2022:17:38:05 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /crm/.env HTTP/1.1" 300 [26/Sep/2022:17:38:06 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 301 [26/Sep/2022:17:38:06 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 303 [26/Sep/2022:17:38:07 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 300 [26/Sep/2022:17:38:08 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/config/.env HTTP/1.1" 306 [26/Sep/2022:17:38:08 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /apps/.env HTTP/1.1" 301 [26/Sep/2022:17:38:09 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /audio/.env HTTP/1.1" 302 [26/Sep/2022:17:38:10 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/.env HTTP/1.1" 304 [26/Sep/2022:17:38:10 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 304 [26/Sep/2022:17:38:11 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /src/.env HTTP/1.1" 300 [26/Sep/2022:17:38:11 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /base/.env HTTP/1.1" 301 [26/Sep/2022:17:38:12 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /core/.env HTTP/1.1" 301 [26/Sep/2022:17:38:13 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/laravel/.env HTTP/1.1" 307 [26/Sep/2022:17:38:13 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 303 [26/Sep/2022:17:38:14 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /protected/.env HTTP/1.1" 304 [26/Sep/2022:17:38:14 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /newsite/.env HTTP/1.1" 302 [26/Sep/2022:17:38:15 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www/.env HTTP/1.1" 299 [26/Sep/2022:17:38:16 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sites/all/libraries/mailchimp/.env HTTP/1.1" 317 [26/Sep/2022:17:38:16 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/.env HTTP/1.1" 303 [26/Sep/2022:17:38:17 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 303 [26/Sep/2022:17:38:18 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /harm.at/.env HTTP/1.1" 301 [26/Sep/2022:17:38:18 +0200] 78.110.173.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 295 [26/Sep/2022:18:09:03 +0200] 20.171.97.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Sep/2022:18:09:03 +0200] 20.171.97.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [26/Sep/2022:18:19:21 +0200] 23.251.102.74 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304 [26/Sep/2022:20:15:59 +0200] 87.236.176.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Sep/2022:20:52:34 +0200] 54.36.148.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 304 [26/Sep/2022:20:52:35 +0200] 54.36.149.81 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [26/Sep/2022:22:53:53 +0200] 192.241.194.198 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [26/Sep/2022:22:55:33 +0200] 192.241.205.223 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [26/Sep/2022:22:57:53 +0200] 192.241.208.63 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [26/Sep/2022:23:01:00 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [26/Sep/2022:23:08:15 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws.credentials HTTP/1.1" 316 [26/Sep/2022:23:08:16 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws.credentials HTTP/1.1" 316 [26/Sep/2022:23:23:57 +0200] 193.235.141.168 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 306 [26/Sep/2022:23:28:47 +0200] 18.236.203.39 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/Sep/2022:23:29:19 +0200] 34.222.244.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [26/Sep/2022:23:35:13 +0200] 54.36.149.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [26/Sep/2022:23:35:13 +0200] 54.36.148.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [26/Sep/2022:23:36:40 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [27/Sep/2022:00:48:12 +0200] 43.129.219.189 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Sep/2022:00:52:34 +0200] 34.76.158.233 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [27/Sep/2022:01:37:23 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Sep/2022:01:37:38 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET /webfig/ HTTP/1.1" 307 [27/Sep/2022:01:53:37 +0200] 198.235.24.15 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393