[30/Oct/2022:02:28:08 +0200] 35.89.92.243 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[30/Oct/2022:02:28:34 +0200] 18.237.175.232 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[30/Oct/2022:02:35:50 +0200] 152.89.196.23 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[30/Oct/2022:02:28:28 +0100] 165.227.210.74 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304
[30/Oct/2022:02:29:41 +0100] 165.227.210.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:03:24:44 +0100] 198.235.24.30 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377
[30/Oct/2022:03:30:50 +0100] 45.134.144.88 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /level/15/exec/-/show/startup-config/CR HTTP/1.1" 421
[30/Oct/2022:04:27:46 +0100] 185.180.143.145 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:04:39:05 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db.bck HTTP/1.1" 400
[30/Oct/2022:05:02:24 +0100] 192.241.216.243 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[30/Oct/2022:05:20:35 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[30/Oct/2022:05:20:36 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[30/Oct/2022:05:20:36 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[30/Oct/2022:05:20:37 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[30/Oct/2022:05:20:37 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[30/Oct/2022:05:20:38 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[30/Oct/2022:05:20:38 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[30/Oct/2022:05:20:38 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[30/Oct/2022:05:20:39 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[30/Oct/2022:05:20:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[30/Oct/2022:05:20:40 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[30/Oct/2022:05:20:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[30/Oct/2022:05:20:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[30/Oct/2022:05:20:41 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[30/Oct/2022:05:20:42 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[30/Oct/2022:05:20:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[30/Oct/2022:05:20:43 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[30/Oct/2022:05:20:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[30/Oct/2022:05:20:44 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[30/Oct/2022:05:20:45 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[30/Oct/2022:05:29:40 +0100] 45.134.144.88 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /level/15/exec/-/show/startup-config/CR HTTP/1.1" 421
[30/Oct/2022:05:32:46 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /db.bck HTTP/1.1" 392
[30/Oct/2022:06:10:07 +0100] 64.62.197.3 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:06:23:28 +0100] 64.62.197.13 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[30/Oct/2022:06:23:48 +0100] 192.241.214.247 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[30/Oct/2022:06:29:12 +0100] 64.62.197.11 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:07:05:25 +0100] 194.110.203.39 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.gz HTTP/1.1" 384
[30/Oct/2022:07:28:44 +0100] 192.241.215.232 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[30/Oct/2022:08:07:56 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.gz HTTP/1.1" 393
[30/Oct/2022:08:09:55 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.gz HTTP/1.1" 401
[30/Oct/2022:08:28:44 +0100] 192.241.218.202 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[30/Oct/2022:08:40:48 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310
[30/Oct/2022:08:40:50 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310
[30/Oct/2022:08:40:52 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317
[30/Oct/2022:08:40:53 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317
[30/Oct/2022:08:40:54 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315
[30/Oct/2022:08:40:55 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315
[30/Oct/2022:08:40:57 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316
[30/Oct/2022:08:40:58 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316
[30/Oct/2022:08:40:59 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314
[30/Oct/2022:08:41:00 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314
[30/Oct/2022:08:41:02 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312
[30/Oct/2022:08:41:04 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312
[30/Oct/2022:08:41:06 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315
[30/Oct/2022:08:41:07 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315
[30/Oct/2022:08:41:08 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313
[30/Oct/2022:08:41:10 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313
[30/Oct/2022:08:41:11 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312
[30/Oct/2022:08:41:12 +0100] 185.83.146.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312
[30/Oct/2022:09:13:40 +0100] 198.12.252.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.rar HTTP/1.1" 385
[30/Oct/2022:09:14:43 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.rar HTTP/1.1" 402
[30/Oct/2022:09:23:46 +0100] 20.231.23.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[30/Oct/2022:09:23:47 +0100] 20.231.23.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[30/Oct/2022:09:35:44 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.rar HTTP/1.1" 394
[30/Oct/2022:09:43:02 +0100] 138.197.150.123 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304
[30/Oct/2022:09:43:04 +0100] 138.197.150.123 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304
[30/Oct/2022:09:43:10 +0100] 138.197.150.123 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:09:57:23 +0100] 192.241.218.251 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[30/Oct/2022:11:26:29 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.zip HTTP/1.1" 385
[30/Oct/2022:11:50:17 +0100] 194.110.203.38 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.zip HTTP/1.1" 402
[30/Oct/2022:12:15:22 +0100] 179.43.175.204 TLSv1.2 AES256-SHA "GET /api/settings/values HTTP/1.1" 313
[30/Oct/2022:12:44:41 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "-" -
[30/Oct/2022:13:12:15 +0100] 192.241.203.189 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[30/Oct/2022:13:40:08 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.tar.gz HTTP/1.1" 388
[30/Oct/2022:14:21:00 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.tar.gz HTTP/1.1" 397
[30/Oct/2022:16:07:11 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.tar HTTP/1.1" 402
[30/Oct/2022:16:51:59 +0100] 152.89.196.211 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[30/Oct/2022:17:11:21 +0100] 213.226.123.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Autodiscover/autodiscover.json?a=lorenzo.purdy@sauer.org/mapi/nspi/ HTTP/1.1" 450
[30/Oct/2022:18:14:13 +0100] 193.118.53.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:19:45:09 +0100] 54.36.149.17 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 304
[30/Oct/2022:19:45:10 +0100] 54.36.148.173 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297
[30/Oct/2022:20:50:54 +0100] 128.14.133.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:20:54:31 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.tgz HTTP/1.1" 402
[30/Oct/2022:21:27:34 +0100] 51.222.253.5 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302
[30/Oct/2022:21:27:35 +0100] 54.36.149.64 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295
[30/Oct/2022:21:30:04 +0100] 192.241.215.118 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305
[30/Oct/2022:22:27:11 +0100] 192.241.215.109 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[30/Oct/2022:22:30:03 +0100] 192.241.214.56 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[30/Oct/2022:22:30:49 +0100] 192.241.219.20 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[30/Oct/2022:22:37:32 +0100] 194.110.203.41 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf.bck HTTP/1.1" 385
[30/Oct/2022:23:17:02 +0100] 206.189.139.119 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304
[30/Oct/2022:23:17:03 +0100] 206.189.139.119 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304
[30/Oct/2022:23:17:09 +0100] 206.189.139.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:23:36:53 +0100] 194.180.48.125 TLSv1.2 AES256-SHA "GET /docker-compose.yml HTTP/1.1" 312
[30/Oct/2022:23:51:21 +0100] 183.136.225.35 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[30/Oct/2022:23:51:44 +0100] 183.136.225.35 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[30/Oct/2022:23:52:05 +0100] 183.136.225.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[30/Oct/2022:23:52:26 +0100] 183.136.225.35 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[30/Oct/2022:23:54:02 +0100] 147.78.47.228 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452
[30/Oct/2022:23:59:40 +0100] 109.206.241.254 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[30/Oct/2022:23:59:41 +0100] 109.206.241.254 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[31/Oct/2022:00:00:41 +0100] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[31/Oct/2022:00:02:14 +0100] 194.180.48.125 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306
[31/Oct/2022:00:20:24 +0100] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[31/Oct/2022:00:22:30 +0100] 94.102.61.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[31/Oct/2022:00:33:59 +0100] 188.166.96.132 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[31/Oct/2022:00:40:53 +0100] 35.195.93.98 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[31/Oct/2022:00:57:53 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /config.gz HTTP/1.1" 386