[27/Mar/2023:02:07:38 +0200] 35.195.241.126 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[27/Mar/2023:02:12:01 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:02:16:27 +0200] 35.90.255.196 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[27/Mar/2023:02:16:54 +0200] 35.164.1.104 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[27/Mar/2023:02:16:55 +0200] 35.87.183.5 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[27/Mar/2023:02:17:01 +0200] 35.87.183.5 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[27/Mar/2023:02:17:31 +0200] 54.187.38.180 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[27/Mar/2023:02:40:43 +0200] 222.108.242.223 TLSv1.2 AES256-SHA "GET /dump.sql HTTP/1.1" 313
[27/Mar/2023:03:22:21 +0200] 54.37.234.234 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:04:05:57 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403
[27/Mar/2023:05:52:13 +0200] 162.243.145.17 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:06:08:35 +0200] 45.134.144.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325
[27/Mar/2023:07:58:15 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[27/Mar/2023:08:46:18 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:08:52:11 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[27/Mar/2023:08:59:56 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[27/Mar/2023:09:01:07 +0200] 174.138.1.38 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302
[27/Mar/2023:09:09:59 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[27/Mar/2023:09:30:57 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[27/Mar/2023:09:39:09 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[27/Mar/2023:09:57:36 +0200] 180.101.233.62 TLSv1.2 AES256-SHA "GET /test.sql HTTP/1.1" 313
[27/Mar/2023:09:58:16 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318
[27/Mar/2023:09:58:28 +0200] 193.235.141.145 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307
[27/Mar/2023:10:01:57 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307
[27/Mar/2023:10:13:40 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315
[27/Mar/2023:10:16:00 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[27/Mar/2023:10:29:24 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:10:34:55 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:10:55:30 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:11:17:14 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315
[27/Mar/2023:11:27:55 +0200] 192.241.232.14 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[27/Mar/2023:11:36:20 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305
[27/Mar/2023:12:50:46 +0200] 87.236.176.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:13:13:04 +0200] 74.82.47.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:13:24:12 +0200] 74.82.47.2 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:13:26:32 +0200] 74.82.47.2 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309
[27/Mar/2023:13:26:56 +0200] 74.82.47.2 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[27/Mar/2023:13:51:36 +0200] 163.172.180.25 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 391
[27/Mar/2023:15:20:56 +0200] 139.162.211.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[27/Mar/2023:15:48:17 +0200] 45.79.181.94 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:16:10:38 +0200] 159.65.120.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[27/Mar/2023:16:31:23 +0200] 176.158.154.217 TLSv1.2 AES256-SHA "GET /mysqldump.sql HTTP/1.1" 304
[27/Mar/2023:16:31:33 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[27/Mar/2023:16:31:34 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[27/Mar/2023:16:31:34 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[27/Mar/2023:16:31:35 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[27/Mar/2023:16:31:35 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[27/Mar/2023:16:31:36 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[27/Mar/2023:16:31:36 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[27/Mar/2023:16:31:37 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[27/Mar/2023:16:31:37 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[27/Mar/2023:16:31:38 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[27/Mar/2023:16:31:38 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[27/Mar/2023:16:31:39 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[27/Mar/2023:16:31:39 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[27/Mar/2023:16:31:40 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[27/Mar/2023:16:31:41 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[27/Mar/2023:16:31:41 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[27/Mar/2023:16:31:42 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[27/Mar/2023:16:31:42 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[27/Mar/2023:16:31:43 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[27/Mar/2023:16:31:43 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[27/Mar/2023:16:31:44 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308
[27/Mar/2023:16:31:45 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308
[27/Mar/2023:16:31:45 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310
[27/Mar/2023:16:31:46 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310
[27/Mar/2023:16:31:46 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307
[27/Mar/2023:16:31:47 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307
[27/Mar/2023:16:36:14 +0200] 137.184.105.192 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304
[27/Mar/2023:16:36:16 +0200] 137.184.105.192 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304
[27/Mar/2023:16:36:17 +0200] 137.184.105.192 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:17:53:53 +0200] 154.209.125.52 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[27/Mar/2023:17:53:57 +0200] 154.209.125.242 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[27/Mar/2023:18:04:34 +0200] 34.221.178.108 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[27/Mar/2023:18:36:23 +0200] 51.15.247.214 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 398
[27/Mar/2023:18:55:08 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403
[27/Mar/2023:19:20:02 +0200] 193.235.141.147 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 306
[27/Mar/2023:19:51:39 +0200] 18.117.176.224 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[27/Mar/2023:19:53:28 +0200] 174.138.1.38 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304
[27/Mar/2023:19:53:29 +0200] 174.138.1.38 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304
[27/Mar/2023:19:53:30 +0200] 174.138.1.38 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:19:53:31 +0200] 174.138.1.38 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302
[27/Mar/2023:20:13:16 +0200] 3.70.14.61 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[27/Mar/2023:20:16:58 +0200] 43.128.232.139 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:20:17:26 +0200] 43.128.232.139 - - "-" -
[27/Mar/2023:20:21:12 +0200] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:20:40:08 +0200] 94.102.51.9 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 298
[27/Mar/2023:20:40:09 +0200] 94.102.51.9 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 305
[27/Mar/2023:20:49:43 +0200] 176.58.108.210 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[27/Mar/2023:21:24:18 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /dns-query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 343
[27/Mar/2023:21:24:20 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /dns-query HTTP/1.1" 308
[27/Mar/2023:21:24:23 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /query?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 340
[27/Mar/2023:21:24:25 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /query HTTP/1.1" 305
[27/Mar/2023:21:24:28 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /resolve?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 342
[27/Mar/2023:21:24:30 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST /resolve HTTP/1.1" 305
[27/Mar/2023:21:24:32 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "GET /?dns=q80BAAABAAAAAAAAA3d3dwdleGFtcGxlA2NvbQAAAQAB HTTP/1.1" 337
[27/Mar/2023:21:24:34 +0200] 47.243.233.244 TLSv1.2 AES256-SHA "POST / HTTP/1.1" 301
[27/Mar/2023:22:54:46 +0200] 185.180.143.6 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[27/Mar/2023:23:16:24 +0200] 34.211.136.62 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[27/Mar/2023:23:16:53 +0200] 52.13.65.221 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314
[27/Mar/2023:23:16:57 +0200] 52.13.65.221 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[27/Mar/2023:23:49:47 +0200] 73.126.72.72 TLSv1.2 AES256-SHA "GET /mysql.sql HTTP/1.1" 301
[27/Mar/2023:23:51:17 +0200] 198.199.105.190 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[28/Mar/2023:00:20:09 +0200] 162.243.136.12 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328
[28/Mar/2023:00:33:40 +0200] 106.242.92.219 TLSv1.2 AES256-SHA "GET /mysql.sql HTTP/1.1" 313
[28/Mar/2023:00:38:17 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[28/Mar/2023:00:38:18 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[28/Mar/2023:00:38:19 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[28/Mar/2023:00:38:19 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[28/Mar/2023:00:38:20 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[28/Mar/2023:00:38:21 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[28/Mar/2023:00:38:21 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[28/Mar/2023:00:38:22 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[28/Mar/2023:00:38:23 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[28/Mar/2023:00:38:23 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[28/Mar/2023:00:38:24 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[28/Mar/2023:00:38:25 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306
[28/Mar/2023:00:38:25 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[28/Mar/2023:00:38:26 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309
[28/Mar/2023:00:38:27 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307
[28/Mar/2023:00:38:27 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307
[28/Mar/2023:00:38:28 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307
[28/Mar/2023:00:38:29 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307
[28/Mar/2023:00:38:30 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[28/Mar/2023:00:38:30 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307
[28/Mar/2023:00:38:31 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308
[28/Mar/2023:00:38:32 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308
[28/Mar/2023:00:38:32 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310
[28/Mar/2023:00:38:40 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310
[28/Mar/2023:00:38:47 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307
[28/Mar/2023:00:38:47 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307
[28/Mar/2023:01:13:45 +0200] 35.91.238.55 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[28/Mar/2023:01:14:11 +0200] 35.90.186.16 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313
[28/Mar/2023:01:14:14 +0200] 35.90.186.16 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306
[28/Mar/2023:01:36:08 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[28/Mar/2023:01:56:57 +0200] 3.70.24.21 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306