[02/Oct/2022:02:06:11 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /configuration.php.old HTTP/1.1" 398 [02/Oct/2022:02:07:42 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [02/Oct/2022:02:18:43 +0200] 128.1.248.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:02:33:52 +0200] 83.12.50.6 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-config.php.old HTTP/1.1" 394 [02/Oct/2022:02:58:47 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-config.php.old HTTP/1.1" 403 [02/Oct/2022:03:00:59 +0200] 44.210.103.39 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [02/Oct/2022:03:48:02 +0200] 192.241.220.248 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [02/Oct/2022:04:06:29 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [02/Oct/2022:04:17:56 +0200] 172.105.161.142 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:04:49:47 +0200] 192.241.218.110 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [02/Oct/2022:05:14:37 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Oct/2022:05:14:38 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 292 [02/Oct/2022:05:14:39 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 292 [02/Oct/2022:05:14:40 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 292 [02/Oct/2022:05:14:41 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 292 [02/Oct/2022:05:14:42 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 292 [02/Oct/2022:05:14:43 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1/ HTTP/1.1" 292 [02/Oct/2022:05:14:44 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1/ HTTP/1.1" 292 [02/Oct/2022:05:14:45 +0200] 44.234.89.142 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1/ HTTP/1.1" 292 [02/Oct/2022:07:09:04 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-config.php.old HTTP/1.1" 394 [02/Oct/2022:07:41:39 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_db_.sql HTTP/1.1" 385 [02/Oct/2022:08:09:00 +0200] 192.241.212.172 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [02/Oct/2022:08:10:51 +0200] 192.241.219.20 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [02/Oct/2022:08:13:02 +0200] 192.241.216.180 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [02/Oct/2022:08:17:00 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_DB_.sql HTTP/1.1" 394 [02/Oct/2022:08:19:32 +0200] 193.46.255.199 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_asterisk/magnito.php HTTP/1.0" 398 [02/Oct/2022:08:43:30 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_DB_.sql HTTP/1.1" 385 [02/Oct/2022:08:44:04 +0200] 167.172.16.72 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:09:27:47 +0200] 167.94.138.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Oct/2022:09:27:47 +0200] 167.94.138.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:09:27:48 +0200] 167.94.138.119 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [02/Oct/2022:09:34:45 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [02/Oct/2022:09:43:02 +0200] 162.19.196.234 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [02/Oct/2022:09:43:02 +0200] 162.19.196.234 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [02/Oct/2022:09:52:35 +0200] 192.241.220.186 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:10:01:19 +0200] 68.183.151.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Oct/2022:10:01:21 +0200] 68.183.151.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [02/Oct/2022:10:01:22 +0200] 68.183.151.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [02/Oct/2022:10:33:36 +0200] 205.210.31.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [02/Oct/2022:11:28:08 +0200] 20.25.116.0 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [02/Oct/2022:11:28:09 +0200] 20.25.116.0 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [02/Oct/2022:11:51:03 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_DB_.sql.zip HTTP/1.1" 398 [02/Oct/2022:12:00:18 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [02/Oct/2022:12:34:36 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_DB_.sql.zip HTTP/1.1" 389 [02/Oct/2022:12:58:19 +0200] 193.118.53.210 TLSv1.2 AES256-SHA "GET /admin/ HTTP/1.1" 305 [02/Oct/2022:13:04:11 +0200] 20.169.5.75 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [02/Oct/2022:13:04:11 +0200] 20.169.5.75 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [02/Oct/2022:14:32:43 +0200] 151.236.33.190 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Oct/2022:15:02:11 +0200] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Oct/2022:15:23:41 +0200] 159.223.0.227 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [02/Oct/2022:15:23:42 +0200] 159.223.0.227 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [02/Oct/2022:15:27:42 +0200] 216.218.206.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Oct/2022:15:35:10 +0200] 216.218.206.68 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [02/Oct/2022:15:40:16 +0200] 216.218.206.120 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:17:39:26 +0200] 199.59.150.181 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387 [02/Oct/2022:17:39:27 +0200] 199.59.150.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [02/Oct/2022:18:52:20 +0200] 128.14.133.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:20:05:52 +0200] 89.23.100.172 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database.sql HTTP/1.1" 406 [02/Oct/2022:20:16:30 +0200] 41.216.188.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-includes/class-wordpress-license.php HTTP/1.1" 325 [02/Oct/2022:20:16:36 +0200] 41.216.188.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-includes/class-index-wordpress.php HTTP/1.1" 324 [02/Oct/2022:20:18:23 +0200] 134.209.145.10 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [02/Oct/2022:20:18:24 +0200] 134.209.145.10 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Oct/2022:20:33:31 +0200] 43.131.66.209 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [02/Oct/2022:20:34:14 +0200] 193.235.141.178 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [02/Oct/2022:21:34:57 +0200] 192.241.218.89 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [02/Oct/2022:22:12:28 +0200] 198.12.252.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sql.sql HTTP/1.1" 384 [02/Oct/2022:22:55:48 +0200] 192.241.207.43 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [02/Oct/2022:23:14:49 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [02/Oct/2022:23:19:04 +0200] 192.241.214.135 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [02/Oct/2022:23:20:33 +0200] 54.201.55.188 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Oct/2022:23:21:21 +0200] 54.187.92.247 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Oct/2022:23:21:25 +0200] 54.69.31.54 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [02/Oct/2022:23:45:11 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [02/Oct/2022:23:55:15 +0200] 163.123.143.186 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [02/Oct/2022:23:55:15 +0200] 163.123.143.186 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [03/Oct/2022:00:20:35 +0200] 198.199.94.158 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [03/Oct/2022:01:04:50 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [03/Oct/2022:01:06:21 +0200] 34.78.6.216 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [03/Oct/2022:01:34:18 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301