[01/Apr/2023:02:00:46 +0200] 104.199.31.214 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Apr/2023:02:12:19 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [01/Apr/2023:02:20:03 +0200] 185.156.46.135 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [01/Apr/2023:02:20:13 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 404 [01/Apr/2023:03:25:29 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403 [01/Apr/2023:03:44:39 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [01/Apr/2023:03:55:11 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:03:55:53 +0200] 68.183.82.133 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [01/Apr/2023:03:55:55 +0200] 68.183.82.133 TLSv1.2 AES256-SHA "GET /ab2h HTTP/1.1" 304 [01/Apr/2023:03:56:00 +0200] 68.183.82.133 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:03:56:02 +0200] 68.183.82.133 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302 [01/Apr/2023:03:56:03 +0200] 68.183.82.133 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [01/Apr/2023:04:05:53 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [01/Apr/2023:04:05:54 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [01/Apr/2023:04:05:55 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [01/Apr/2023:04:05:55 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [01/Apr/2023:04:05:56 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [01/Apr/2023:04:05:56 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [01/Apr/2023:04:05:57 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [01/Apr/2023:04:05:58 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [01/Apr/2023:04:05:58 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [01/Apr/2023:04:05:59 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [01/Apr/2023:04:06:00 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306 [01/Apr/2023:04:06:00 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /test.php HTTP/1.1" 306 [01/Apr/2023:04:06:01 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309 [01/Apr/2023:04:06:02 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /laravel/.env HTTP/1.1" 309 [01/Apr/2023:04:06:03 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /demo/.env HTTP/1.1" 307 [01/Apr/2023:04:06:03 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /demo/.env HTTP/1.1" 307 [01/Apr/2023:04:06:04 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /web/.env HTTP/1.1" 307 [01/Apr/2023:04:06:05 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /web/.env HTTP/1.1" 307 [01/Apr/2023:04:06:05 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307 [01/Apr/2023:04:06:06 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /phpinfo HTTP/1.1" 307 [01/Apr/2023:04:06:06 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/.env HTTP/1.1" 308 [01/Apr/2023:04:06:08 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /admin/.env HTTP/1.1" 308 [01/Apr/2023:04:06:08 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /backend/.env HTTP/1.1" 310 [01/Apr/2023:04:06:09 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /backend/.env HTTP/1.1" 310 [01/Apr/2023:04:06:09 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307 [01/Apr/2023:04:06:10 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /app/.env HTTP/1.1" 307 [01/Apr/2023:04:27:29 +0200] 198.235.24.50 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393 [01/Apr/2023:04:59:34 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Apr/2023:05:27:48 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [01/Apr/2023:05:56:37 +0200] 192.241.198.19 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:06:42:45 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [01/Apr/2023:06:47:11 +0200] 128.14.133.58 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:06:47:22 +0200] 128.14.133.58 TLSv1.2 AES256-SHA "HEAD /icons/sphere1.png HTTP/1.1" - [01/Apr/2023:07:10:58 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:07:18:12 +0200] 51.222.253.11 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302 [01/Apr/2023:07:18:15 +0200] 54.36.148.234 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [01/Apr/2023:07:26:46 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [01/Apr/2023:07:57:27 +0200] 92.118.39.108 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [01/Apr/2023:08:15:27 +0200] 51.222.253.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 304 [01/Apr/2023:08:15:28 +0200] 54.36.149.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 297 [01/Apr/2023:08:28:26 +0200] 35.86.191.118 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD /epa/scripts/win/nsepa_setup.exe HTTP/1.1" - [01/Apr/2023:08:40:57 +0200] 205.210.31.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [01/Apr/2023:10:17:48 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [01/Apr/2023:10:48:13 +0200] 162.142.125.12 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [01/Apr/2023:10:48:14 +0200] 162.142.125.12 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:10:48:14 +0200] 162.142.125.12 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [01/Apr/2023:10:49:00 +0200] 161.35.233.14 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [01/Apr/2023:10:49:33 +0200] 65.49.20.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:10:55:32 +0200] 65.49.20.66 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [01/Apr/2023:10:57:14 +0200] 65.49.20.66 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:10:58:24 +0200] 65.49.20.66 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309 [01/Apr/2023:10:58:36 +0200] 65.49.20.66 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [01/Apr/2023:11:32:49 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [01/Apr/2023:12:37:07 +0200] 185.100.87.139 TLSv1.2 AES256-SHA "GET /.DS_Store HTTP/1.1" 307 [01/Apr/2023:12:37:08 +0200] 45.140.143.53 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [01/Apr/2023:12:37:38 +0200] 192.42.116.177 TLSv1.2 AES256-SHA "GET /.DS_Store HTTP/1.1" 307 [01/Apr/2023:15:24:41 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:15:51:07 +0200] 69.164.217.74 - - "-" - [01/Apr/2023:15:57:57 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:16:19:24 +0200] 94.102.61.7 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:17:16:32 +0200] 208.100.26.249 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 297 [01/Apr/2023:18:00:49 +0200] 139.59.129.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 299 [01/Apr/2023:18:12:55 +0200] 107.170.252.8 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [01/Apr/2023:18:17:49 +0200] 198.199.111.75 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [01/Apr/2023:18:21:51 +0200] 162.243.136.18 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [01/Apr/2023:19:40:14 +0200] 35.212.222.235 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [01/Apr/2023:19:43:17 +0200] 35.81.77.169 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /owa/auth/logon.aspx HTTP/1.1" 402 [01/Apr/2023:19:59:01 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403 [01/Apr/2023:21:41:14 +0200] 128.14.134.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:21:55:51 +0200] 161.35.233.14 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [01/Apr/2023:22:22:35 +0200] 193.235.141.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307 [01/Apr/2023:22:50:05 +0200] 198.199.98.137 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [01/Apr/2023:23:00:40 +0200] 35.216.211.228 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:23:12:37 +0200] 45.79.181.251 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [01/Apr/2023:23:29:23 +0200] 94.23.133.43 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 405 [01/Apr/2023:23:31:50 +0200] 94.102.61.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Apr/2023:23:36:12 +0200] 94.102.61.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Apr/2023:23:42:52 +0200] 94.102.61.7 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [01/Apr/2023:23:54:54 +0200] 192.241.221.20 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [01/Apr/2023:23:59:04 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:00:02:39 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [02/Apr/2023:00:21:44 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [02/Apr/2023:00:27:59 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [02/Apr/2023:00:52:09 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [02/Apr/2023:01:13:36 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [02/Apr/2023:01:28:08 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [02/Apr/2023:01:29:59 +0200] 35.87.197.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [02/Apr/2023:01:30:38 +0200] 35.89.191.183 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 313 [02/Apr/2023:01:30:43 +0200] 35.89.191.183 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [02/Apr/2023:01:33:47 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [02/Apr/2023:01:42:21 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [02/Apr/2023:01:47:25 +0200] 54.186.126.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [02/Apr/2023:01:48:06 +0200] 34.219.110.21 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [02/Apr/2023:01:50:23 +0200] 163.123.142.132 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_profiler/phpinfo HTTP/1.1" 313 [02/Apr/2023:01:50:23 +0200] 163.123.142.132 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /debug/default/view?panel=config HTTP/1.1" 325 [02/Apr/2023:01:56:46 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301