[22/Oct/2022:02:00:55 +0200] 40.79.246.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [22/Oct/2022:02:19:25 +0200] 192.241.219.225 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:02:36:27 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [22/Oct/2022:02:37:05 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:02:37:26 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [22/Oct/2022:02:38:07 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [22/Oct/2022:02:44:28 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.bak HTTP/1.1" 393 [22/Oct/2022:02:45:21 +0200] 194.110.203.42 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.bak HTTP/1.1" 402 [22/Oct/2022:02:55:48 +0200] 45.95.147.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login?lang=en HTTP/1.1" 403 [22/Oct/2022:02:58:00 +0200] 45.155.126.4 TLSv1.2 AES256-SHA "-" - [22/Oct/2022:03:27:43 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.bak HTTP/1.1" 410 [22/Oct/2022:04:45:18 +0200] 65.49.20.113 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:04:50:31 +0200] 54.185.22.177 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [22/Oct/2022:04:51:10 +0200] 34.213.182.124 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [22/Oct/2022:04:51:14 +0200] 34.213.182.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [22/Oct/2022:05:03:27 +0200] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.bck HTTP/1.1" 393 [22/Oct/2022:05:07:11 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.bck HTTP/1.1" 402 [22/Oct/2022:05:21:26 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.bck HTTP/1.1" 410 [22/Oct/2022:05:22:44 +0200] 167.71.169.172 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [22/Oct/2022:05:22:45 +0200] 167.71.169.172 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [22/Oct/2022:05:22:48 +0200] 167.71.169.172 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:05:48:45 +0200] 167.94.145.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [22/Oct/2022:05:48:45 +0200] 167.94.145.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:05:48:45 +0200] 167.94.145.60 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [22/Oct/2022:06:17:09 +0200] 198.235.24.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [22/Oct/2022:06:42:00 +0200] 13.56.12.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [22/Oct/2022:06:42:02 +0200] 13.56.12.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [22/Oct/2022:07:01:38 +0200] 13.56.12.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [22/Oct/2022:07:01:40 +0200] 13.56.12.1 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [22/Oct/2022:07:20:55 +0200] 195.133.40.166 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [22/Oct/2022:07:20:56 +0200] 195.133.40.166 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [22/Oct/2022:07:38:07 +0200] 72.251.235.152 - - "-" - [22/Oct/2022:07:43:41 +0200] 198.12.252.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.php.bak HTTP/1.1" 414 [22/Oct/2022:08:23:44 +0200] 192.241.219.20 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [22/Oct/2022:08:27:48 +0200] 192.241.218.58 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [22/Oct/2022:08:29:57 +0200] 192.241.219.120 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [22/Oct/2022:08:32:21 +0200] 109.206.241.78 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 322 [22/Oct/2022:08:32:34 +0200] 109.206.241.78 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 320 [22/Oct/2022:08:41:27 +0200] 206.189.7.68 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [22/Oct/2022:08:41:27 +0200] 206.189.7.68 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [22/Oct/2022:08:41:29 +0200] 206.189.7.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:09:29:19 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.php.bck HTTP/1.1" 406 [22/Oct/2022:09:43:31 +0200] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/database.php.bck HTTP/1.1" 414 [22/Oct/2022:10:28:42 +0200] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:11:39:10 +0200] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [22/Oct/2022:11:39:51 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:11:40:13 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [22/Oct/2022:11:40:34 +0200] 183.136.225.35 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [22/Oct/2022:12:03:01 +0200] 143.198.195.116 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [22/Oct/2022:12:03:04 +0200] 143.198.195.116 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [22/Oct/2022:12:03:12 +0200] 143.198.195.116 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:13:10:11 +0200] 43.135.123.64 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:13:29:21 +0200] 94.102.61.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:13:37:24 +0200] 193.235.141.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 306 [22/Oct/2022:13:53:28 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [22/Oct/2022:14:03:51 +0200] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/connect.bak HTTP/1.1" 392 [22/Oct/2022:15:34:53 +0200] 128.14.134.134 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304 [22/Oct/2022:15:58:25 +0200] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/connect.bck HTTP/1.1" 392 [22/Oct/2022:16:27:37 +0200] 176.58.124.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [22/Oct/2022:16:29:25 +0200] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/connect.bck HTTP/1.1" 401 [22/Oct/2022:16:50:54 +0200] 207.46.13.234 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [22/Oct/2022:16:50:55 +0200] 207.46.13.234 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 302 [22/Oct/2022:16:51:05 +0200] 40.77.167.53 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [22/Oct/2022:17:54:10 +0200] 23.251.102.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:18:15:21 +0200] 188.132.135.194 TLSv1.2 AES256-SHA "GET /Electron/download/windows/%5CProgram%20Files%5C3CX%20Phone%20System%5CData%5CDB%5Cbase%5C16384%5C16393 HTTP/1.1" 369 [22/Oct/2022:18:27:58 +0200] 192.241.209.145 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [22/Oct/2022:18:47:24 +0200] 167.172.63.181 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [22/Oct/2022:18:47:25 +0200] 167.172.63.181 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [22/Oct/2022:18:47:26 +0200] 167.172.63.181 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [22/Oct/2022:18:47:47 +0200] 54.201.133.249 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [22/Oct/2022:18:48:27 +0200] 35.91.65.132 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [22/Oct/2022:18:48:30 +0200] 35.91.65.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [22/Oct/2022:18:49:51 +0200] 52.39.220.188 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [22/Oct/2022:18:50:17 +0200] 54.212.200.46 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [22/Oct/2022:19:03:23 +0200] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inc/connect.php.bak HTTP/1.1" 405 [22/Oct/2022:19:46:34 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /T1in HTTP/1.1" 387 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1666460795 HTTP/1.1" 407 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /scripts/WPnBr.dll HTTP/1.1" 400 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 424 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /start.jhtml HTTP/1.1" 394 [22/Oct/2022:19:46:35 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925 [22/Oct/2022:19:46:36 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /CSS/Miniweb.css HTTP/1.1" 398 [22/Oct/2022:19:46:36 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [22/Oct/2022:19:46:38 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [22/Oct/2022:19:46:38 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools HTTP/1.1" 388 [22/Oct/2022:19:46:38 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 396 [22/Oct/2022:19:46:38 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [22/Oct/2022:19:46:46 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [22/Oct/2022:19:46:46 +0200] 195.96.137.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [22/Oct/2022:20:42:45 +0200] 152.89.196.211 TLSv1.2 AES256-SHA "-" - [22/Oct/2022:21:15:24 +0200] 192.241.215.208 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [22/Oct/2022:22:08:40 +0200] 45.134.144.237 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET //a2billing/customer/templates/default/footer.tpl HTTP/1.1" 333 [22/Oct/2022:22:30:52 +0200] 77.111.247.56 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [22/Oct/2022:23:05:53 +0200] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /includes/db.php~ HTTP/1.1" 410 [22/Oct/2022:23:06:29 +0200] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /includes/db.php~ HTTP/1.1" 393 [22/Oct/2022:23:41:21 +0200] 154.89.5.217 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [23/Oct/2022:00:00:04 +0200] 20.254.40.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [23/Oct/2022:00:00:04 +0200] 20.254.40.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 307 [23/Oct/2022:00:00:05 +0200] 20.254.40.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 300 [23/Oct/2022:00:00:05 +0200] 20.254.40.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 297 [23/Oct/2022:00:00:07 +0200] 20.254.40.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298 [23/Oct/2022:00:00:07 +0200] 20.254.40.117 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 295 [23/Oct/2022:00:10:57 +0200] 142.93.180.244 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [23/Oct/2022:00:11:01 +0200] 142.93.180.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Oct/2022:00:27:29 +0200] 128.1.248.42 TLSv1.2 AES256-SHA "GET /solr/ HTTP/1.1" 304 [23/Oct/2022:01:11:44 +0200] 159.65.149.124 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [23/Oct/2022:01:11:49 +0200] 159.65.149.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [23/Oct/2022:01:13:16 +0200] 34.76.96.55 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [23/Oct/2022:01:28:57 +0200] 198.235.24.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [23/Oct/2022:01:38:08 +0200] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /includes/db.bak HTTP/1.1" 392