[14/Oct/2022:02:10:51 +0200] 45.93.201.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.rar HTTP/1.1" 393 [14/Oct/2022:02:12:31 +0200] 45.93.201.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.rar HTTP/1.1" 384 [14/Oct/2022:02:12:59 +0200] 159.65.199.203 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [14/Oct/2022:02:13:49 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [14/Oct/2022:02:16:44 +0200] 52.34.16.63 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Oct/2022:02:17:14 +0200] 34.223.229.180 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [14/Oct/2022:02:17:18 +0200] 34.223.229.180 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Oct/2022:03:25:01 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 300 [14/Oct/2022:03:25:01 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 297 [14/Oct/2022:03:25:01 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /core/.env HTTP/1.1" 303 [14/Oct/2022:03:25:02 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /core/.env HTTP/1.1" 303 [14/Oct/2022:03:25:02 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 297 [14/Oct/2022:03:25:02 +0200] 146.255.98.206 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /core/.env HTTP/1.1" 303 [14/Oct/2022:03:56:40 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [14/Oct/2022:03:59:17 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [14/Oct/2022:04:14:27 +0200] 15.236.209.235 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [14/Oct/2022:04:14:28 +0200] 15.236.209.235 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [14/Oct/2022:04:17:49 +0200] 103.149.192.136 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:04:58:09 +0200] 205.185.122.184 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [14/Oct/2022:04:58:11 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305 [14/Oct/2022:04:58:44 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [14/Oct/2022:04:58:46 +0200] 205.185.116.89 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [14/Oct/2022:04:58:59 +0200] 209.141.51.222 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:04:59:02 +0200] 209.141.51.222 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 308 [14/Oct/2022:04:59:54 +0200] 209.141.36.112 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Oct/2022:04:59:56 +0200] 209.141.36.112 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [14/Oct/2022:05:00:52 +0200] 125.124.63.167 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:05:00:56 +0200] 125.124.63.167 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:05:05:33 +0200] 51.222.253.18 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [14/Oct/2022:05:09:23 +0200] 157.230.16.165 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:05:22:33 +0200] 205.210.31.169 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [14/Oct/2022:05:41:07 +0200] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.tar.gz HTTP/1.1" 387 [14/Oct/2022:05:50:31 +0200] 192.241.212.152 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [14/Oct/2022:06:00:47 +0200] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.tar.gz HTTP/1.1" 396 [14/Oct/2022:06:01:34 +0200] 154.53.36.169 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:06:07:38 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [14/Oct/2022:06:52:41 +0200] 192.241.219.74 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [14/Oct/2022:06:55:04 +0200] 87.236.176.167 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [14/Oct/2022:07:25:57 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 300 [14/Oct/2022:07:25:57 +0200] 88.214.43.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 300 [14/Oct/2022:07:31:11 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.zip HTTP/1.1" 393 [14/Oct/2022:07:51:59 +0200] 192.241.207.94 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [14/Oct/2022:07:58:21 +0200] 83.12.50.6 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.zip HTTP/1.1" 401 [14/Oct/2022:08:08:26 +0200] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [14/Oct/2022:08:46:08 +0200] 64.62.197.150 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:08:55:53 +0200] 64.62.197.147 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:08:59:27 +0200] 64.62.197.142 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:10:02:15 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.bck HTTP/1.1" 393 [14/Oct/2022:10:05:07 +0200] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web.bck HTTP/1.1" 401 [14/Oct/2022:10:17:07 +0200] 192.241.214.114 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:10:35:24 +0200] 83.143.86.62 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:11:15:46 +0200] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [14/Oct/2022:11:15:46 +0200] 167.248.133.45 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:11:15:47 +0200] 167.248.133.45 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [14/Oct/2022:12:14:54 +0200] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.gz HTTP/1.1" 383 [14/Oct/2022:12:20:09 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.gz HTTP/1.1" 392 [14/Oct/2022:13:47:18 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:13:55:34 +0200] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.rar HTTP/1.1" 384 [14/Oct/2022:14:10:36 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:14:26:42 +0200] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.rar HTTP/1.1" 393 [14/Oct/2022:14:52:58 +0200] 192.241.219.153 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [14/Oct/2022:15:02:14 +0200] 81.17.242.172 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /webclient/ HTTP/1.1" 393 [14/Oct/2022:15:21:28 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [14/Oct/2022:15:43:35 +0200] 207.46.13.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [14/Oct/2022:15:48:29 +0200] 43.131.66.209 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 500 [14/Oct/2022:16:13:08 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.tar HTTP/1.1" 393 [14/Oct/2022:16:18:56 +0200] 185.107.56.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Oct/2022:16:18:56 +0200] 185.107.56.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [14/Oct/2022:16:48:01 +0200] 71.6.146.185 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [14/Oct/2022:16:48:12 +0200] 71.6.146.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Oct/2022:16:48:13 +0200] 71.6.146.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Oct/2022:16:48:14 +0200] 71.6.146.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Oct/2022:16:48:18 +0200] 71.6.146.185 TLSv1.2 AES256-SHA "quit" 379 [14/Oct/2022:16:48:18 +0200] 71.6.146.185 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [14/Oct/2022:16:48:19 +0200] 71.6.146.185 TLSv1.2 AES256-SHA "GET /sitemap.xml HTTP/1.1" 394 [14/Oct/2022:16:48:20 +0200] 71.6.146.185 TLSv1.2 AES256-SHA "GET /.well-known/security.txt HTTP/1.1" 407 [14/Oct/2022:16:48:22 +0200] 71.6.146.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:16:48:24 +0200] 71.6.146.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Oct/2022:16:49:35 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Oct/2022:17:13:42 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:17:14:03 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:17:14:24 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [14/Oct/2022:17:21:05 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [14/Oct/2022:17:22:21 +0200] 77.111.247.205 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [14/Oct/2022:17:39:53 +0200] 212.47.251.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 392 [14/Oct/2022:18:11:54 +0200] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.tar.bz2 HTTP/1.1" 405 [14/Oct/2022:18:45:04 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php.bak HTTP/1.1" 306 [14/Oct/2022:18:45:05 +0200] 185.83.144.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo.php.bak HTTP/1.1" 306 [14/Oct/2022:19:01:32 +0200] 192.241.220.110 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [14/Oct/2022:19:03:54 +0200] 192.241.219.55 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [14/Oct/2022:19:05:49 +0200] 192.241.216.180 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [14/Oct/2022:19:16:07 +0200] 35.211.206.89 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [14/Oct/2022:19:16:40 +0200] 137.184.27.161 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [14/Oct/2022:19:16:41 +0200] 137.184.27.161 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [14/Oct/2022:19:16:45 +0200] 137.184.27.161 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:19:18:09 +0200] 134.122.184.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /81160/ HTTP/1.1" 308 [14/Oct/2022:19:57:11 +0200] 205.210.31.161 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [14/Oct/2022:20:06:55 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [14/Oct/2022:21:00:56 +0200] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.tar.gz HTTP/1.1" 396 [14/Oct/2022:21:08:46 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [14/Oct/2022:21:09:29 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:21:09:50 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:21:10:11 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [14/Oct/2022:21:17:11 +0200] 205.210.31.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [14/Oct/2022:22:16:24 +0200] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www.tgz HTTP/1.1" 401 [14/Oct/2022:22:17:45 +0200] 51.158.108.77 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [14/Oct/2022:22:32:24 +0200] 193.118.53.194 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:23:17:05 +0200] 147.182.158.25 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [14/Oct/2022:23:17:10 +0200] 147.182.158.25 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [14/Oct/2022:23:17:23 +0200] 147.182.158.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:23:50:56 +0200] 205.210.31.141 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [14/Oct/2022:23:58:07 +0200] 209.141.35.128 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/Oct/2022:23:58:09 +0200] 209.141.36.112 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [14/Oct/2022:23:58:26 +0200] 209.141.33.65 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [14/Oct/2022:23:58:30 +0200] 209.141.41.193 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305 [14/Oct/2022:23:58:53 +0200] 209.141.35.128 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [14/Oct/2022:23:58:57 +0200] 209.141.34.187 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [14/Oct/2022:23:59:29 +0200] 205.185.116.25 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Oct/2022:00:00:15 +0200] 209.141.36.231 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [15/Oct/2022:00:48:37 +0200] 192.241.214.186 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [15/Oct/2022:01:02:45 +0200] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [15/Oct/2022:01:26:01 +0200] 206.189.182.194 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [15/Oct/2022:01:26:03 +0200] 206.189.182.194 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [15/Oct/2022:01:26:17 +0200] 206.189.182.194 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [15/Oct/2022:01:37:06 +0200] 54.244.186.72 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [15/Oct/2022:01:37:38 +0200] 35.93.119.237 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313 [15/Oct/2022:01:37:42 +0200] 35.93.119.237 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306