[26/Mar/2023:01:02:48 +0100] 185.180.143.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:01:43:05 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Mar/2023:01:43:05 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [26/Mar/2023:01:43:12 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/.env HTTP/1.1" 308 [26/Mar/2023:01:43:12 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /conf/.env HTTP/1.1" 308 [26/Mar/2023:01:43:54 +0100] 208.83.234.224 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [26/Mar/2023:01:44:10 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-content/.env HTTP/1.1" 311 [26/Mar/2023:01:44:11 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-content/.env HTTP/1.1" 311 [26/Mar/2023:01:44:26 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /wp-admin/.env HTTP/1.1" 310 [26/Mar/2023:01:44:27 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /wp-admin/.env HTTP/1.1" 310 [26/Mar/2023:01:44:50 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /library/.env HTTP/1.1" 310 [26/Mar/2023:01:44:51 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /library/.env HTTP/1.1" 310 [26/Mar/2023:01:46:13 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /new/.env HTTP/1.1" 307 [26/Mar/2023:01:46:14 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /new/.env HTTP/1.1" 307 [26/Mar/2023:01:46:33 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/.env HTTP/1.1" 309 [26/Mar/2023:01:46:34 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /vendor/.env HTTP/1.1" 309 [26/Mar/2023:01:46:40 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /old/.env HTTP/1.1" 307 [26/Mar/2023:01:46:41 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /old/.env HTTP/1.1" 307 [26/Mar/2023:01:46:46 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /local/.env HTTP/1.1" 308 [26/Mar/2023:01:46:46 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /local/.env HTTP/1.1" 308 [26/Mar/2023:01:46:52 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/.env HTTP/1.1" 307 [26/Mar/2023:01:46:52 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /api/.env HTTP/1.1" 307 [26/Mar/2023:01:47:02 +0100] 52.12.113.52 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [26/Mar/2023:01:47:31 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /blog/.env HTTP/1.1" 308 [26/Mar/2023:01:47:32 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /blog/.env HTTP/1.1" 308 [26/Mar/2023:01:47:46 +0100] 54.245.199.87 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [26/Mar/2023:01:48:20 +0100] 35.92.60.134 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302 [26/Mar/2023:01:49:05 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /crm/.env HTTP/1.1" 306 [26/Mar/2023:01:49:06 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /crm/.env HTTP/1.1" 306 [26/Mar/2023:01:49:11 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308 [26/Mar/2023:01:49:12 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308 [26/Mar/2023:01:49:32 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [26/Mar/2023:01:49:32 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [26/Mar/2023:01:49:53 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307 [26/Mar/2023:01:49:53 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307 [26/Mar/2023:01:49:59 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/config/.env HTTP/1.1" 313 [26/Mar/2023:01:50:00 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/config/.env HTTP/1.1" 313 [26/Mar/2023:01:50:38 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /apps/.env HTTP/1.1" 307 [26/Mar/2023:01:50:39 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /apps/.env HTTP/1.1" 307 [26/Mar/2023:01:51:08 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /audio/.env HTTP/1.1" 308 [26/Mar/2023:01:51:09 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /audio/.env HTTP/1.1" 308 [26/Mar/2023:01:51:58 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/.env HTTP/1.1" 310 [26/Mar/2023:01:51:59 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /cgi-bin/.env HTTP/1.1" 310 [26/Mar/2023:01:52:22 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310 [26/Mar/2023:01:52:23 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310 [26/Mar/2023:01:52:38 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /src/.env HTTP/1.1" 306 [26/Mar/2023:01:52:39 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /src/.env HTTP/1.1" 306 [26/Mar/2023:01:52:55 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /base/.env HTTP/1.1" 307 [26/Mar/2023:01:52:55 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /base/.env HTTP/1.1" 307 [26/Mar/2023:01:53:01 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /core/.env HTTP/1.1" 307 [26/Mar/2023:01:53:01 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /core/.env HTTP/1.1" 307 [26/Mar/2023:01:53:16 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /vendor/laravel/.env HTTP/1.1" 312 [26/Mar/2023:01:53:16 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /vendor/laravel/.env HTTP/1.1" 312 [26/Mar/2023:01:53:23 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /storage/.env HTTP/1.1" 310 [26/Mar/2023:01:53:23 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /storage/.env HTTP/1.1" 310 [26/Mar/2023:01:53:33 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /protected/.env HTTP/1.1" 310 [26/Mar/2023:01:53:33 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /protected/.env HTTP/1.1" 310 [26/Mar/2023:01:54:30 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /newsite/.env HTTP/1.1" 309 [26/Mar/2023:01:54:31 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /newsite/.env HTTP/1.1" 309 [26/Mar/2023:01:54:40 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /www/.env HTTP/1.1" 306 [26/Mar/2023:01:54:41 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /www/.env HTTP/1.1" 306 [26/Mar/2023:01:54:46 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sites/all/libraries/mailchimp/.env HTTP/1.1" 323 [26/Mar/2023:01:54:47 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sites/all/libraries/mailchimp/.env HTTP/1.1" 323 [26/Mar/2023:01:55:07 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /database/.env HTTP/1.1" 310 [26/Mar/2023:01:55:08 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /database/.env HTTP/1.1" 310 [26/Mar/2023:01:56:04 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /public/.env HTTP/1.1" 309 [26/Mar/2023:01:56:07 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /public/.env HTTP/1.1" 309 [26/Mar/2023:01:56:13 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /__tests__/test-become/.env HTTP/1.1" 318 [26/Mar/2023:01:56:13 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /__tests__/test-become/.env HTTP/1.1" 318 [26/Mar/2023:01:56:45 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /redmine/.env HTTP/1.1" 309 [26/Mar/2023:01:56:45 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /redmine/.env HTTP/1.1" 309 [26/Mar/2023:01:56:51 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /gists/cache HTTP/1.1" 308 [26/Mar/2023:01:56:52 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /gists/cache HTTP/1.1" 308 [26/Mar/2023:01:56:57 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /uploads/.env HTTP/1.1" 310 [26/Mar/2023:01:56:58 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /uploads/.env HTTP/1.1" 310 [26/Mar/2023:01:57:28 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /lib/.env HTTP/1.1" 307 [26/Mar/2023:01:57:28 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /lib/.env HTTP/1.1" 307 [26/Mar/2023:01:57:43 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sendgrid.env HTTP/1.1" 310 [26/Mar/2023:01:57:44 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sendgrid.env HTTP/1.1" 310 [26/Mar/2023:01:57:50 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws.env HTTP/1.1" 306 [26/Mar/2023:01:57:50 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws.env HTTP/1.1" 306 [26/Mar/2023:01:58:00 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.example HTTP/1.1" 310 [26/Mar/2023:01:58:01 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env.example HTTP/1.1" 310 [26/Mar/2023:01:58:19 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /main/.env HTTP/1.1" 307 [26/Mar/2023:01:58:20 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /main/.env HTTP/1.1" 307 [26/Mar/2023:01:58:36 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /docs/.env HTTP/1.1" 307 [26/Mar/2023:01:58:36 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /docs/.env HTTP/1.1" 307 [26/Mar/2023:01:58:47 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /client/.env HTTP/1.1" 308 [26/Mar/2023:01:58:48 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /client/.env HTTP/1.1" 308 [26/Mar/2023:01:59:35 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.dev HTTP/1.1" 307 [26/Mar/2023:01:59:36 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env.dev HTTP/1.1" 307 [26/Mar/2023:01:59:59 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /blogs/.env HTTP/1.1" 309 [26/Mar/2023:01:59:59 +0100] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /blogs/.env HTTP/1.1" 309 [26/Mar/2023:03:00:05 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /shared/.env HTTP/1.1" 308 [26/Mar/2023:03:00:05 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /shared/.env HTTP/1.1" 308 [26/Mar/2023:03:00:10 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /download/.env HTTP/1.1" 310 [26/Mar/2023:03:00:11 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /download/.env HTTP/1.1" 310 [26/Mar/2023:03:01:01 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.php HTTP/1.1" 307 [26/Mar/2023:03:01:02 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env.php HTTP/1.1" 307 [26/Mar/2023:03:01:38 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /site/.env HTTP/1.1" 307 [26/Mar/2023:03:01:38 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /site/.env HTTP/1.1" 307 [26/Mar/2023:03:01:43 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sites/.env HTTP/1.1" 308 [26/Mar/2023:03:01:44 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sites/.env HTTP/1.1" 308 [26/Mar/2023:03:02:19 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [26/Mar/2023:03:02:20 +0200] 193.42.33.177 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [26/Mar/2023:03:19:12 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 395 [26/Mar/2023:03:19:12 +0200] 81.209.177.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [26/Mar/2023:04:09:25 +0200] 81.209.147.8 - - "-" - [26/Mar/2023:04:09:35 +0200] 81.209.147.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [26/Mar/2023:04:09:46 +0200] 81.209.147.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [26/Mar/2023:04:17:53 +0200] 139.180.170.247 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [26/Mar/2023:04:57:51 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET /owa/ HTTP/1.1" 304 [26/Mar/2023:04:57:54 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?a..foo.var/owa/?&Email=autodiscover/autodiscover.json?a..foo.var&Protocol=XYZ&FooProtocol=%50owershell HTTP/1.1" 378 [26/Mar/2023:04:58:03 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:04:58:13 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET /solr/ HTTP/1.1" 304 [26/Mar/2023:04:58:26 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:04:58:28 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET /admin/ HTTP/1.1" 305 [26/Mar/2023:04:58:28 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET /webfig/ HTTP/1.1" 307 [26/Mar/2023:04:58:48 +0200] 185.180.143.11 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:05:50:44 +0200] 192.241.212.99 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:06:16:34 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403 [26/Mar/2023:06:24:58 +0200] 103.149.192.152 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:07:11:44 +0200] 186.211.1.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /Electron/download/windows/\\Windows\\win.ini HTTP/1.0" 423 [26/Mar/2023:08:31:22 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:08:33:04 +0200] 64.62.197.191 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:08:41:23 +0200] 64.62.197.188 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [26/Mar/2023:08:43:28 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [26/Mar/2023:08:45:04 +0200] 64.62.197.183 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:08:47:34 +0200] 64.62.197.184 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309 [26/Mar/2023:08:48:25 +0200] 64.62.197.184 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [26/Mar/2023:08:48:54 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [26/Mar/2023:08:58:12 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [26/Mar/2023:09:06:20 +0200] 43.156.165.175 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Mar/2023:09:29:37 +0200] 167.248.133.51 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Mar/2023:09:29:37 +0200] 167.248.133.51 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:09:29:38 +0200] 167.248.133.51 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/Mar/2023:09:29:58 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [26/Mar/2023:09:38:55 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [26/Mar/2023:09:51:36 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [26/Mar/2023:10:01:37 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [26/Mar/2023:10:06:59 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [26/Mar/2023:10:16:57 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:10:30:41 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:10:38:08 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [26/Mar/2023:11:00:24 +0200] 205.210.31.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [26/Mar/2023:11:04:40 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:11:19:34 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [26/Mar/2023:11:36:53 +0200] 205.210.31.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [26/Mar/2023:11:47:59 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305 [26/Mar/2023:12:08:21 +0200] 185.65.135.160 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [26/Mar/2023:12:36:29 +0200] 92.63.197.133 TLSv1.2 AES256-SHA "GET /remote/login?lang=en HTTP/1.1" 315 [26/Mar/2023:13:19:08 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:13:33:19 +0200] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 304 [26/Mar/2023:13:48:06 +0200] 159.223.73.222 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302 [26/Mar/2023:15:23:40 +0200] 45.79.128.205 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:15:37:18 +0200] 64.176.7.63 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [26/Mar/2023:16:29:18 +0200] 43.156.165.175 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [26/Mar/2023:16:53:00 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403 [26/Mar/2023:16:54:11 +0200] 94.102.51.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [26/Mar/2023:16:54:12 +0200] 94.102.51.9 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305 [26/Mar/2023:17:27:19 +0200] 45.61.184.205 TLSv1.2 AES256-SHA "HEAD / HTTP/1.1" - [26/Mar/2023:17:57:28 +0200] 193.56.29.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Mar/2023:17:57:28 +0200] 193.56.29.26 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [26/Mar/2023:17:59:33 +0200] 107.170.192.15 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [26/Mar/2023:18:03:54 +0200] 162.243.145.13 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [26/Mar/2023:18:09:34 +0200] 107.170.252.8 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [26/Mar/2023:18:21:57 +0200] 45.61.184.205 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@test.com/owa/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 349 [26/Mar/2023:18:21:57 +0200] 45.61.184.205 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@test.com/mapi/nspi/?&Email=autodiscover/autodiscover.json%3F@test.com HTTP/1.1" 354 [26/Mar/2023:18:36:13 +0200] 198.199.102.200 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [26/Mar/2023:18:38:17 +0200] 103.203.59.1 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Mar/2023:18:44:16 +0200] 146.115.146.97 TLSv1.2 AES256-SHA "GET /backup.sql HTTP/1.1" 303 [26/Mar/2023:19:58:16 +0200] 167.94.138.127 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Mar/2023:19:58:16 +0200] 167.94.138.127 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:19:58:17 +0200] 167.94.138.127 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/Mar/2023:20:14:43 +0200] 134.122.133.58 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /movie/16876.html HTTP/1.1" 399 [26/Mar/2023:21:14:43 +0200] 146.190.154.101 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304 [26/Mar/2023:21:14:47 +0200] 146.190.154.101 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304 [26/Mar/2023:21:14:49 +0200] 146.190.154.101 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:21:44:10 +0200] 172.173.129.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [26/Mar/2023:21:44:11 +0200] 172.173.129.154 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [26/Mar/2023:22:05:40 +0200] 83.215.27.238 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 383 [26/Mar/2023:22:05:49 +0200] 83.215.27.238 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 383 [26/Mar/2023:22:05:58 +0200] 83.215.27.238 TLSv1.2 DHE-RSA-AES256-SHA256 "GET / HTTP/1.1" 383 [26/Mar/2023:22:20:06 +0200] 167.94.145.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [26/Mar/2023:22:20:06 +0200] 167.94.145.60 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:22:20:06 +0200] 167.94.145.60 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [26/Mar/2023:22:55:21 +0200] 159.223.73.222 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [26/Mar/2023:22:55:23 +0200] 159.223.73.222 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [26/Mar/2023:22:55:31 +0200] 159.223.73.222 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [26/Mar/2023:22:55:33 +0200] 159.223.73.222 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302 [26/Mar/2023:23:42:59 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [26/Mar/2023:23:43:01 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [26/Mar/2023:23:43:04 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [26/Mar/2023:23:43:04 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [26/Mar/2023:23:43:05 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [26/Mar/2023:23:43:05 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [26/Mar/2023:23:43:09 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [26/Mar/2023:23:43:09 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [26/Mar/2023:23:43:13 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [26/Mar/2023:23:43:13 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [26/Mar/2023:23:43:15 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [26/Mar/2023:23:43:16 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [26/Mar/2023:23:43:19 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 317 [26/Mar/2023:23:43:20 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 317 [26/Mar/2023:23:43:20 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [26/Mar/2023:23:43:23 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [26/Mar/2023:23:43:24 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [26/Mar/2023:23:43:27 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [26/Mar/2023:23:43:27 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [26/Mar/2023:23:43:30 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312 [26/Mar/2023:23:43:31 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [26/Mar/2023:23:43:31 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312 [26/Mar/2023:23:43:34 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 312 [26/Mar/2023:23:43:35 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [26/Mar/2023:23:43:38 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 312 [26/Mar/2023:23:43:39 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315 [26/Mar/2023:23:43:39 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313 [26/Mar/2023:23:43:42 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 315 [26/Mar/2023:23:43:43 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313 [26/Mar/2023:23:43:44 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 315 [26/Mar/2023:23:43:46 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312 [26/Mar/2023:23:43:48 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 313 [26/Mar/2023:23:43:48 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 313 [26/Mar/2023:23:43:50 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312 [26/Mar/2023:23:43:52 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 312 [26/Mar/2023:23:43:53 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 312 [26/Mar/2023:23:43:56 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 312 [26/Mar/2023:23:43:56 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 312 [26/Mar/2023:23:43:57 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 312 [26/Mar/2023:23:43:59 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 314 [26/Mar/2023:23:44:00 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 312 [26/Mar/2023:23:44:02 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 314 [26/Mar/2023:23:44:03 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 316 [26/Mar/2023:23:44:04 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 314 [26/Mar/2023:23:44:07 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 314 [26/Mar/2023:23:44:07 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 316 [26/Mar/2023:23:44:11 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 315 [26/Mar/2023:23:44:11 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 312 [26/Mar/2023:23:44:14 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 315 [26/Mar/2023:23:44:14 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 312 [26/Mar/2023:23:44:16 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 312 [26/Mar/2023:23:44:20 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 312 [26/Mar/2023:23:50:25 +0200] 107.170.227.29 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [27/Mar/2023:00:55:01 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [27/Mar/2023:01:22:03 +0200] 65.20.70.24 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 308 [27/Mar/2023:01:56:50 +0200] 36.2.134.131 TLSv1.2 AES256-SHA "GET /dump.sql HTTP/1.1" 301