[02/Apr/2023:02:01:36 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [02/Apr/2023:02:19:43 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:02:52:00 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [02/Apr/2023:03:13:48 +0200] 143.244.41.219 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "-" - [02/Apr/2023:03:32:10 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:03:39:49 +0200] 45.134.144.119 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [02/Apr/2023:04:10:37 +0200] 87.236.176.210 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:04:12:14 +0200] 78.111.67.138 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:04:13:30 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [02/Apr/2023:04:21:11 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305 [02/Apr/2023:04:29:04 +0200] 162.221.192.26 TLSv1.2 AES256-SHA "GET /cgi-bin/config.exp HTTP/1.1" 315 [02/Apr/2023:05:54:16 +0200] 184.105.247.252 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:05:59:57 +0200] 162.243.144.15 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:06:02:45 +0200] 184.105.247.252 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [02/Apr/2023:06:06:22 +0200] 184.105.247.252 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:06:09:10 +0200] 184.105.247.252 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309 [02/Apr/2023:08:25:06 +0200] 193.235.141.143 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 306 [02/Apr/2023:08:35:45 +0200] 3.36.85.77 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /owa/auth.owa HTTP/1.1" 308 [02/Apr/2023:09:00:23 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [02/Apr/2023:09:00:23 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [02/Apr/2023:09:00:24 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [02/Apr/2023:09:00:25 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [02/Apr/2023:09:00:26 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [02/Apr/2023:09:00:26 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [02/Apr/2023:09:00:27 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [02/Apr/2023:10:53:23 +0200] 167.94.138.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Apr/2023:10:53:24 +0200] 167.94.138.124 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:10:53:25 +0200] 167.94.138.124 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [02/Apr/2023:11:24:37 +0200] 193.218.118.178 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 293 [02/Apr/2023:12:10:49 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang" 403 [02/Apr/2023:14:54:59 +0200] 45.155.126.4 TLSv1.2 AES256-SHA "-" - [02/Apr/2023:15:32:48 +0200] 167.248.133.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Apr/2023:15:32:49 +0200] 167.248.133.125 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:15:32:49 +0200] 167.248.133.125 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [02/Apr/2023:17:06:51 +0200] 103.149.192.148 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:17:50:04 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:18:01:21 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [02/Apr/2023:18:12:25 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [02/Apr/2023:18:23:53 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [02/Apr/2023:18:33:23 +0200] 192.241.193.13 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [02/Apr/2023:18:36:30 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [02/Apr/2023:18:51:44 +0200] 193.235.141.114 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 295 [02/Apr/2023:19:06:13 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /mifs/.;/services/LogService HTTP/1.1" 318 [02/Apr/2023:19:15:30 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [02/Apr/2023:19:17:51 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [02/Apr/2023:19:17:54 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [02/Apr/2023:19:17:55 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [02/Apr/2023:19:17:55 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET /server-status HTTP/1.1" 308 [02/Apr/2023:19:17:55 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET /config.json HTTP/1.1" 311 [02/Apr/2023:19:17:55 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 304 [02/Apr/2023:19:17:55 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 311 [02/Apr/2023:19:17:55 +0200] 35.216.229.26 TLSv1.2 AES256-SHA "GET /info.php HTTP/1.1" 307 [02/Apr/2023:19:25:24 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [02/Apr/2023:19:34:50 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [02/Apr/2023:19:42:19 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:20:02:58 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:20:21:14 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:20:39:31 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [02/Apr/2023:21:05:27 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305 [02/Apr/2023:23:13:21 +0200] 52.26.59.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Apr/2023:23:15:26 +0200] 18.237.251.105 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Apr/2023:23:16:01 +0200] 54.186.144.101 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 314 [02/Apr/2023:23:16:05 +0200] 54.186.144.101 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Apr/2023:23:16:58 +0200] 52.27.222.222 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [02/Apr/2023:23:40:36 +0200] 161.35.190.246 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304 [02/Apr/2023:23:40:47 +0200] 161.35.190.246 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304 [02/Apr/2023:23:41:00 +0200] 161.35.190.246 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [02/Apr/2023:23:55:32 +0200] 159.203.224.7 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [03/Apr/2023:00:23:27 +0200] 68.183.67.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Apr/2023:00:32:18 +0200] 206.189.120.50 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304 [03/Apr/2023:00:32:29 +0200] 206.189.120.50 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304 [03/Apr/2023:00:32:39 +0200] 206.189.120.50 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Apr/2023:00:52:08 +0200] 172.105.128.13 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Apr/2023:01:30:26 +0200] 167.71.229.198 TLSv1.2 AES256-SHA "GET /aaa9 HTTP/1.1" 304 [03/Apr/2023:01:30:39 +0200] 167.71.229.198 TLSv1.2 AES256-SHA "GET /aab8 HTTP/1.1" 304 [03/Apr/2023:01:30:49 +0200] 167.71.229.198 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [03/Apr/2023:01:55:02 +0200] 34.79.42.172 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301