[17/Mar/2023:01:08:52 +0100] 167.94.138.50 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:01:08:53 +0100] 167.94.138.50 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [17/Mar/2023:01:09:15 +0100] 193.235.141.125 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 306 [17/Mar/2023:01:11:17 +0100] 34.77.199.190 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Mar/2023:01:49:10 +0100] 192.241.232.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:03:22:43 +0100] 122.96.28.91 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [17/Mar/2023:03:23:40 +0100] 111.85.200.5 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [17/Mar/2023:04:02:10 +0100] 23.251.102.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:04:05:55 +0100] 164.92.138.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:05:28:14 +0100] 51.158.98.24 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [17/Mar/2023:05:51:47 +0100] 185.107.56.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [17/Mar/2023:05:51:47 +0100] 185.107.56.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 2946 [17/Mar/2023:05:52:18 +0100] 147.78.103.100 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [17/Mar/2023:05:52:51 +0100] 147.78.103.100 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [17/Mar/2023:06:10:57 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:06:15:44 +0100] 137.226.113.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:06:20:52 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [17/Mar/2023:06:35:09 +0100] 128.14.134.134 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:06:36:57 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [17/Mar/2023:06:41:42 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [17/Mar/2023:07:42:50 +0100] 34.152.49.140 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.0" 383 [17/Mar/2023:07:45:05 +0100] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [17/Mar/2023:07:51:24 +0100] 128.14.141.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:08:04:07 +0100] 35.213.191.235 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [17/Mar/2023:08:09:15 +0100] 192.241.198.8 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [17/Mar/2023:09:41:39 +0100] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Mar/2023:09:57:29 +0100] 51.15.251.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [17/Mar/2023:09:59:50 +0100] 184.105.139.67 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:10:03:08 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [17/Mar/2023:10:03:09 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:10:03:10 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:10:03:12 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [17/Mar/2023:10:03:13 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET /favicon.ico/ HTTP/1.1" 309 [17/Mar/2023:10:03:14 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [17/Mar/2023:10:03:15 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET /robots.txt/ HTTP/1.1" 309 [17/Mar/2023:10:03:16 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET /.well-known/security.txt HTTP/1.1" 319 [17/Mar/2023:10:03:17 +0100] 118.123.105.90 TLSv1.2 AES256-SHA "GET /.well-known/security.txt/ HTTP/1.1" 319 [17/Mar/2023:10:29:57 +0100] 192.241.233.4 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [17/Mar/2023:11:09:23 +0100] 68.183.224.221 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302 [17/Mar/2023:11:13:27 +0100] 139.162.192.57 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Mar/2023:11:15:09 +0100] 139.162.203.110 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Mar/2023:11:21:53 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [17/Mar/2023:11:32:49 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [17/Mar/2023:11:48:16 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [17/Mar/2023:11:50:39 +0100] 193.235.141.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [17/Mar/2023:11:58:07 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [17/Mar/2023:12:08:59 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [17/Mar/2023:12:22:51 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:12:25:08 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:12:48:43 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:13:09:32 +0100] 51.15.247.214 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391 [17/Mar/2023:13:28:15 +0100] 176.58.118.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Mar/2023:13:29:59 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [17/Mar/2023:13:34:02 +0100] 70.36.102.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [17/Mar/2023:13:39:18 +0100] 152.89.196.54 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305 [17/Mar/2023:13:48:08 +0100] 198.235.24.49 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [17/Mar/2023:14:47:24 +0100] 167.71.184.215 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [17/Mar/2023:14:47:25 +0100] 167.71.184.215 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [17/Mar/2023:14:47:27 +0100] 167.71.184.215 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [17/Mar/2023:15:26:43 +0100] 128.14.133.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:16:05:57 +0100] 107.170.192.15 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [17/Mar/2023:16:07:28 +0100] 198.199.97.240 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [17/Mar/2023:16:09:55 +0100] 107.170.252.8 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [17/Mar/2023:16:59:32 +0100] 192.241.200.163 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [17/Mar/2023:17:15:26 +0100] 45.79.181.179 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:17:25:11 +0100] 184.105.139.67 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [17/Mar/2023:17:31:22 +0100] 184.105.139.67 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [17/Mar/2023:17:41:00 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [17/Mar/2023:18:25:05 +0100] 92.118.39.108 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [17/Mar/2023:18:35:25 +0100] 198.235.24.184 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [17/Mar/2023:18:41:36 +0100] 45.134.144.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [17/Mar/2023:18:52:08 +0100] 43.153.208.98 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:18:52:34 +0100] 43.153.208.98 - - "-" - [17/Mar/2023:20:19:28 +0100] 157.230.236.124 - - "-" - [17/Mar/2023:20:35:36 +0100] 45.83.66.193 TLSv1.2 AES256-SHA "GET /connector.sds HTTP/1.1" 310 [17/Mar/2023:21:04:25 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [17/Mar/2023:21:04:26 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [17/Mar/2023:21:04:26 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [17/Mar/2023:21:04:26 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [17/Mar/2023:21:04:27 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [17/Mar/2023:21:04:27 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [17/Mar/2023:21:04:28 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [17/Mar/2023:21:04:28 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [17/Mar/2023:21:04:29 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [17/Mar/2023:21:04:29 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [17/Mar/2023:21:04:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [17/Mar/2023:21:04:30 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [17/Mar/2023:21:04:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [17/Mar/2023:21:04:31 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [17/Mar/2023:21:04:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [17/Mar/2023:21:04:32 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [17/Mar/2023:21:04:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [17/Mar/2023:21:04:33 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [17/Mar/2023:21:04:34 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [17/Mar/2023:21:04:34 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [17/Mar/2023:21:04:35 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308 [17/Mar/2023:21:04:35 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308 [17/Mar/2023:21:04:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310 [17/Mar/2023:21:04:36 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310 [17/Mar/2023:21:04:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307 [17/Mar/2023:21:04:37 +0100] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307 [17/Mar/2023:21:47:44 +0100] 159.65.162.32 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302 [17/Mar/2023:22:27:01 +0100] 54.148.11.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [17/Mar/2023:22:27:34 +0100] 34.211.49.244 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [17/Mar/2023:22:27:48 +0100] 34.221.127.40 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [17/Mar/2023:22:27:50 +0100] 34.221.127.40 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [17/Mar/2023:22:28:15 +0100] 35.165.2.68 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [17/Mar/2023:22:28:20 +0100] 35.165.2.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [17/Mar/2023:23:23:06 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [17/Mar/2023:23:23:16 +0100] 128.1.248.42 TLSv1.2 AES256-SHA "HEAD /icons/sphere1.png HTTP/1.1" - [17/Mar/2023:23:32:41 +0100] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [18/Mar/2023:00:27:52 +0100] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301