[13/May/2023:03:28:00 +0200] 184.105.139.69 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:03:28:16 +0200] 142.93.152.148 TLSv1.2 AES256-SHA "GET /ab2g HTTP/1.1" 304 [13/May/2023:03:28:23 +0200] 142.93.152.148 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:03:28:24 +0200] 142.93.152.148 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302 [13/May/2023:03:28:25 +0200] 142.93.152.148 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [13/May/2023:03:35:52 +0200] 198.235.24.171 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [13/May/2023:05:00:19 +0200] 193.37.69.152 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 452 [13/May/2023:06:19:35 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [13/May/2023:06:19:36 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [13/May/2023:06:19:39 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [13/May/2023:06:19:40 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 310 [13/May/2023:06:19:43 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [13/May/2023:06:19:43 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 317 [13/May/2023:06:19:46 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [13/May/2023:06:19:47 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 317 [13/May/2023:06:19:50 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [13/May/2023:06:19:50 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 315 [13/May/2023:06:19:53 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [13/May/2023:06:19:54 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 315 [13/May/2023:06:19:56 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 317 [13/May/2023:06:19:57 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 317 [13/May/2023:06:20:00 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 316 [13/May/2023:06:20:01 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [13/May/2023:06:20:03 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 316 [13/May/2023:06:20:05 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [13/May/2023:06:20:07 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 314 [13/May/2023:06:20:10 +0200] 109.237.98.53 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 314 [13/May/2023:06:22:03 +0200] 205.210.31.9 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 394 [13/May/2023:06:28:13 +0200] 8.209.68.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 308 [13/May/2023:06:49:56 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [13/May/2023:06:52:19 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331 [13/May/2023:07:05:23 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390 [13/May/2023:07:18:47 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327 [13/May/2023:08:02:38 +0200] 161.35.233.14 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [13/May/2023:08:22:27 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319 [13/May/2023:08:22:55 +0200] 107.170.251.5 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310 [13/May/2023:08:37:52 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:08:52:46 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:09:18:48 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:09:27:56 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315 [13/May/2023:09:30:04 +0200] 128.1.134.26 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [13/May/2023:09:37:11 +0200] 47.88.31.213 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=hdABAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" 338 [13/May/2023:09:41:19 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/May/2023:09:44:48 +0200] 47.88.31.213 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 308 [13/May/2023:09:52:21 +0200] 84.54.50.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [13/May/2023:09:52:22 +0200] 84.54.50.19 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301 [13/May/2023:10:00:27 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305 [13/May/2023:10:38:09 +0200] 128.14.209.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:11:02:15 +0200] 141.98.11.144 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [13/May/2023:11:54:28 +0200] 198.235.24.46 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [13/May/2023:12:10:18 +0200] 161.35.233.14 TLSv1.2 AES256-SHA "GET /explore HTTP/1.1" 306 [13/May/2023:13:57:12 +0200] 128.1.248.42 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:14:19:49 +0200] 142.93.186.204 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [13/May/2023:14:19:50 +0200] 142.93.186.204 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [13/May/2023:14:19:51 +0200] 142.93.186.204 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [13/May/2023:15:21:38 +0200] 192.241.223.31 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [13/May/2023:15:42:47 +0200] 137.175.66.146 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.vscode/sftp.json HTTP/1.1" 411 [13/May/2023:15:45:32 +0200] 162.243.150.15 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:16:51:45 +0200] 162.243.140.44 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [13/May/2023:16:53:58 +0200] 198.199.97.240 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [13/May/2023:16:55:33 +0200] 107.170.192.15 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [13/May/2023:17:04:45 +0200] 104.168.236.230 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /sftp-config.json HTTP/1.1" 410 [13/May/2023:19:03:53 +0200] 172.104.11.51 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [13/May/2023:21:29:01 +0200] 185.180.143.142 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [13/May/2023:22:38:25 +0200] 203.161.32.211 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login HTTP/1.1" 395 [13/May/2023:23:47:33 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [14/May/2023:01:56:52 +0200] 34.140.248.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301