[31/Jan/2023:01:07:06 +0100] 163.172.180.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [31/Jan/2023:01:11:52 +0100] 139.162.194.254 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:02:04:42 +0100] 77.73.134.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-includes/css/wp-embed-template-ie.css HTTP/1.1" 320 [31/Jan/2023:02:20:17 +0100] 148.153.45.237 TLSv1.2 AES256-SHA "GET /MXEr HTTP/1.1" 304 [31/Jan/2023:02:20:18 +0100] 148.153.45.237 TLSv1.2 AES256-SHA "GET /n3bZ HTTP/1.1" 305 [31/Jan/2023:02:20:19 +0100] 148.153.45.237 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304 [31/Jan/2023:02:20:21 +0100] 148.153.45.237 TLSv1.2 AES256-SHA "GET /aab9 HTTP/1.1" 304 [31/Jan/2023:04:09:15 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:04:15:11 +0100] 185.180.143.79 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:04:15:18 +0100] 185.180.143.79 TLSv1.2 AES256-SHA "GET /showLogin.cc HTTP/1.1" 311 [31/Jan/2023:04:46:09 +0100] 205.210.31.132 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [31/Jan/2023:05:09:47 +0100] 93.159.230.88 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:06:09:25 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:06:19:46 +0100] 107.170.253.8 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [31/Jan/2023:06:47:42 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /mysql.yml HTTP/1.1" 395 [31/Jan/2023:06:59:27 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [31/Jan/2023:07:09:56 +0100] 77.74.177.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:07:19:37 +0100] 45.134.144.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [31/Jan/2023:07:25:36 +0100] 107.170.231.11 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:07:33:05 +0100] 216.218.206.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:07:57:10 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:08:00:59 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:08:01:25 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [31/Jan/2023:08:02:18 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [31/Jan/2023:08:10:08 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:08:21:56 +0100] 167.248.133.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [31/Jan/2023:08:21:57 +0100] 167.248.133.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:08:21:58 +0100] 167.248.133.60 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [31/Jan/2023:08:46:40 +0100] 198.235.24.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [31/Jan/2023:08:54:19 +0100] 193.142.146.214 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:09:10:04 +0100] 93.159.230.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:10:08:49 +0100] 193.142.146.214 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:10:36:48 +0100] 34.78.6.216 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [31/Jan/2023:10:51:22 +0100] 162.142.125.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [31/Jan/2023:10:51:23 +0100] 162.142.125.211 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:10:51:23 +0100] 162.142.125.211 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [31/Jan/2023:12:43:18 +0100] 185.180.143.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:12:53:22 +0100] 212.47.251.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 381 [31/Jan/2023:13:35:08 +0100] 205.210.31.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 380 [31/Jan/2023:13:47:04 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [31/Jan/2023:13:47:04 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [31/Jan/2023:13:47:05 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [31/Jan/2023:13:47:05 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [31/Jan/2023:13:47:06 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [31/Jan/2023:13:47:06 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [31/Jan/2023:13:47:07 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [31/Jan/2023:13:47:07 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [31/Jan/2023:13:47:09 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [31/Jan/2023:13:47:10 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [31/Jan/2023:13:47:11 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [31/Jan/2023:13:47:12 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [31/Jan/2023:13:47:13 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [31/Jan/2023:13:47:13 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [31/Jan/2023:13:47:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [31/Jan/2023:13:47:14 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [31/Jan/2023:13:47:15 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [31/Jan/2023:13:47:15 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [31/Jan/2023:13:47:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [31/Jan/2023:13:47:16 +0100] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [31/Jan/2023:14:07:38 +0100] 194.110.203.45 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sql.yaml HTTP/1.1" 385 [31/Jan/2023:14:55:32 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:15:02:09 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:15:02:33 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [31/Jan/2023:15:03:19 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [31/Jan/2023:15:44:10 +0100] 193.142.146.214 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:15:52:40 +0100] 87.236.176.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:15:55:25 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /host.env HTTP/1.1" 402 [31/Jan/2023:16:19:30 +0100] 194.110.203.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /host.env HTTP/1.1" 385 [31/Jan/2023:17:04:44 +0100] 178.79.170.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [31/Jan/2023:17:25:36 +0100] 204.48.30.226 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:17:28:52 +0100] 204.48.30.226 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:17:52:10 +0100] 194.110.203.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /host.yml HTTP/1.1" 402 [31/Jan/2023:18:48:05 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /host.yml HTTP/1.1" 385 [31/Jan/2023:18:56:16 +0100] 194.110.203.47 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /host.yml HTTP/1.1" 394 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal/Portal.mwsl HTTP/1.1" 401 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Portal0000.htm HTTP/1.1" 397 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /9itF HTTP/1.1" 387 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /indice.pl HTTP/1.1" 392 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPE9568F36-D428-11d2-A769-00AA001ACF42 HTTP/1.1" 424 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "SSTP_DUPLEX_POST /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ HTTP/1.1" 925 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /CSS/Miniweb.css HTTP/1.1" 398 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 396 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/HEAD HTTP/1.1" 392 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /docs/cplugError.html/ HTTP/1.1" 404 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1675188262 HTTP/1.1" 407 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 HTTP/1.1" 424 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /menu.php HTTP/1.1" 391 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /scripts/WPnBr.dll HTTP/1.1" 400 [31/Jan/2023:19:04:22 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [31/Jan/2023:19:04:28 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /home.shtml HTTP/1.1" 393 [31/Jan/2023:19:04:28 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:19:04:28 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /default.asp HTTP/1.1" 394 [31/Jan/2023:19:04:29 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 394 [31/Jan/2023:19:04:29 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /main.php HTTP/1.1" 391 [31/Jan/2023:19:04:29 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:19:04:29 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /index.cgi HTTP/1.1" 392 [31/Jan/2023:19:04:29 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pools HTTP/1.1" 388 [31/Jan/2023:19:04:29 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /indice.asp HTTP/1.1" 393 [31/Jan/2023:19:04:30 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /start.jhtml HTTP/1.1" 394 [31/Jan/2023:19:04:30 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inicio.aspx HTTP/1.1" 394 [31/Jan/2023:19:04:30 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /main.asp HTTP/1.1" 391 [31/Jan/2023:19:04:31 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /menu.shtml HTTP/1.1" 393 [31/Jan/2023:19:04:33 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [31/Jan/2023:19:04:33 +0100] 178.79.139.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [31/Jan/2023:19:21:45 +0100] 194.110.203.40 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /host.yaml HTTP/1.1" 395 [31/Jan/2023:19:30:09 +0100] 40.118.212.119 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [31/Jan/2023:19:30:19 +0100] 159.203.192.13 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [31/Jan/2023:19:32:08 +0100] 198.235.24.155 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [31/Jan/2023:19:59:11 +0100] 128.14.134.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:20:33:44 +0100] 172.105.133.215 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [31/Jan/2023:20:34:41 +0100] 85.159.210.76 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [31/Jan/2023:20:54:03 +0100] 51.158.109.3 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 389 [31/Jan/2023:22:10:04 +0100] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [31/Jan/2023:22:55:11 +0100] 138.68.182.153 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [31/Jan/2023:22:55:12 +0100] 138.68.182.153 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [31/Jan/2023:22:55:13 +0100] 138.68.182.153 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Feb/2023:00:10:11 +0100] 185.180.143.6 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Feb/2023:00:19:30 +0100] 34.77.127.183 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Feb/2023:00:42:58 +0100] 185.180.143.72 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Feb/2023:00:52:15 +0100] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [01/Feb/2023:00:57:41 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Feb/2023:00:58:11 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [01/Feb/2023:00:58:49 +0100] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308