[19/Apr/2023:03:20:10 +0200] 94.102.56.151 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [19/Apr/2023:06:12:53 +0200] 192.241.216.8 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:06:39:18 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:06:43:24 +0200] 185.180.143.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:07:11:00 +0200] 45.43.33.218 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [19/Apr/2023:07:12:46 +0200] 205.210.31.214 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [19/Apr/2023:07:35:12 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/Apr/2023:07:46:34 +0200] 194.36.25.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.well-known/security.txt HTTP/1.1" 421 [19/Apr/2023:08:17:03 +0200] 193.106.29.122 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388 [19/Apr/2023:09:21:30 +0200] 20.100.168.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/Apr/2023:09:53:43 +0200] 51.254.49.107 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [19/Apr/2023:10:53:24 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [19/Apr/2023:10:54:47 +0200] 149.18.73.240 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET ///remote/fgt_lang?lang=/../../../..//////////dev/ HTTP/1.1" 325 [19/Apr/2023:11:04:08 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [19/Apr/2023:11:16:06 +0200] 60.17.96.50 TLSv1.2 AES256-SHA "GET / HTTP/1.0" 383 [19/Apr/2023:11:16:27 +0200] 121.28.84.80 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [19/Apr/2023:11:25:47 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [19/Apr/2023:11:45:29 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [19/Apr/2023:11:52:32 +0200] 74.82.47.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:12:01:41 +0200] 74.82.47.4 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [19/Apr/2023:12:04:22 +0200] 74.82.47.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:12:07:00 +0200] 74.82.47.4 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309 [19/Apr/2023:12:07:22 +0200] 74.82.47.4 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [19/Apr/2023:12:52:29 +0200] 100.24.123.105 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [19/Apr/2023:14:32:18 +0200] 18.236.173.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307 [19/Apr/2023:15:45:43 +0200] 104.168.190.157 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.vscode/sftp.json HTTP/1.1" 394 [19/Apr/2023:16:06:30 +0200] 104.168.133.127 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sftp-config.json HTTP/1.1" 393 [19/Apr/2023:16:35:27 +0200] 66.240.236.109 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:17:24:31 +0200] 192.241.203.230 TLSv1.2 AES256-SHA "GET /version HTTP/1.1" 305 [19/Apr/2023:17:57:03 +0200] 212.87.204.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [19/Apr/2023:17:57:03 +0200] 212.87.204.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [19/Apr/2023:18:36:54 +0200] 167.248.133.52 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:18:36:55 +0200] 167.248.133.52 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379 [19/Apr/2023:21:00:14 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "-" - [19/Apr/2023:21:00:30 +0200] 172.105.128.12 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:21:35:52 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /console/ HTTP/1.1" 307 [19/Apr/2023:21:43:43 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /Autodiscover/Autodiscover.xml HTTP/1.1" 315 [19/Apr/2023:21:53:46 +0200] 192.241.202.29 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [19/Apr/2023:21:54:43 +0200] 149.202.134.47 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:21:55:17 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [19/Apr/2023:22:07:27 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:22:39:48 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:22:42:53 +0200] 176.113.115.51 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/v1" 394 [19/Apr/2023:22:46:19 +0200] 185.142.236.36 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [19/Apr/2023:22:46:26 +0200] 185.142.236.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [19/Apr/2023:22:46:27 +0200] 185.142.236.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [19/Apr/2023:22:46:27 +0200] 185.142.236.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [19/Apr/2023:22:46:31 +0200] 185.142.236.36 TLSv1.2 AES256-SHA "quit" 379 [19/Apr/2023:22:46:31 +0200] 185.142.236.36 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [19/Apr/2023:22:46:31 +0200] 185.142.236.36 TLSv1.2 AES256-SHA "GET /sitemap.xml HTTP/1.1" 394 [19/Apr/2023:22:46:31 +0200] 185.142.236.36 TLSv1.2 AES256-SHA "GET /.well-known/security.txt HTTP/1.1" 407 [19/Apr/2023:22:46:34 +0200] 185.142.236.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 309 [19/Apr/2023:22:46:35 +0200] 185.142.236.36 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "" 379 [19/Apr/2023:23:08:10 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 293 [19/Apr/2023:23:17:48 +0200] 20.203.44.229 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [19/Apr/2023:23:50:18 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/Apr/2023:23:52:24 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 393 [20/Apr/2023:00:04:15 +0200] 192.241.238.10 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [20/Apr/2023:00:29:23 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [20/Apr/2023:00:54:52 +0200] 152.89.196.54 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305 [20/Apr/2023:01:04:58 +0200] 35.233.62.116 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [20/Apr/2023:01:53:41 +0200] 213.32.122.82 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383