[14/May/2023:02:40:46 +0200] 167.248.133.126 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:02:40:46 +0200] 167.248.133.126 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[14/May/2023:03:18:43 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[14/May/2023:03:18:43 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[14/May/2023:03:18:44 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[14/May/2023:03:18:44 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[14/May/2023:03:18:45 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[14/May/2023:03:18:45 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[14/May/2023:03:18:45 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[14/May/2023:03:18:46 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[14/May/2023:03:18:47 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[14/May/2023:03:18:48 +0200] 109.237.97.180 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[14/May/2023:03:51:01 +0200] 20.84.84.176 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 298
[14/May/2023:03:51:07 +0200] 20.84.84.176 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310
[14/May/2023:03:58:49 +0200] 23.251.102.74 TLSv1.2 AES256-SHA "GET /cgi-bin/config.exp HTTP/1.1" 315
[14/May/2023:04:02:45 +0200] 20.84.84.176 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 295
[14/May/2023:04:02:51 +0200] 20.84.84.176 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 307
[14/May/2023:06:51:28 +0200] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[14/May/2023:07:01:19 +0200] 47.74.90.127 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /dns-query HTTP/1.1" 308
[14/May/2023:07:04:01 +0200] 183.136.225.32 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:07:04:30 +0200] 183.136.225.32 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[14/May/2023:07:04:57 +0200] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308
[14/May/2023:07:07:03 +0200] 162.142.125.215 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[14/May/2023:07:07:03 +0200] 162.142.125.215 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:07:07:04 +0200] 162.142.125.215 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[14/May/2023:07:13:57 +0200] 87.236.176.190 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:07:32:13 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\": 1, \"method\": \"mining.subscribe\", \"params\": [\"cpuminer/2.5.1\"]}" 379
[14/May/2023:07:32:26 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\": 1, \"method\": \"mining.subscribe\", \"params\": [\"MinerName/1.0.0\", \"EthereumStratum/1.0.0\"]}" 379
[14/May/2023:07:32:35 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\":1,\"method\":\"eth_submitLogin\",\"worker\":\"eth1.0\",\"params\":[\"0x808cb8f5042f9853ebda0d4548d41b0c46b7b170\",\"x\"],\"jsonrpc\":\"2.0\"}" 379
[14/May/2023:07:32:51 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "{\"id\":1,\"jsonrpc\":\"2.0\",\"method\":\"login\",\"params\":{\"login\":\"41nvt2XnNyWdebW4TJDcJKS1trdjNS9pS1SFQ642nC4RhwUYdKrfZtiCPcvvKTZ7MaN5cuShKJgwxgtZ1uyvqFF7UGAryQ7\",\"pass\":\"x\",\"agent\":\"XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\",\"algo\":[\"cn/1\",\"cn/2\",\"cn/r\",\"cn/fast\",\"cn/half\",\"cn/xao\",\"cn/rto\",\"cn/rwz\",\"cn/zls\",\"cn/double\",\"cn/ccx\",\"cn-lite/1\",\"cn-heavy/0\",\"cn-heavy/tube\",\"cn-heavy/xhv\",\"cn-pico\",\"cn-pico/tlo\",\"cn/upx2\",\"rx/0\",\"rx/wow\",\"rx/arq\",\"rx/graft\",\"rx/sfx\",\"rx/keva\",\"argon2/chukwa\",\"argon2/chukwav2\",\"argon2/ninja\",\"astrobwt\"]}}" 379
[14/May/2023:07:32:56 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[14/May/2023:07:33:00 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[14/May/2023:07:33:12 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[14/May/2023:07:33:16 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /WuEL HTTP/1.1" 387
[14/May/2023:07:33:23 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET stager64 HTTP/1.1" 293
[14/May/2023:07:33:27 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /a HTTP/1.1" 302
[14/May/2023:07:33:31 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /download/file.ext HTTP/1.1" 313
[14/May/2023:07:33:39 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /SiteLoader HTTP/1.1" 307
[14/May/2023:07:33:58 +0200] 185.213.175.62 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /mPlayer HTTP/1.1" 306
[14/May/2023:07:45:58 +0200] 64.227.166.35 TLSv1.2 AES256-SHA "GET /t4 HTTP/1.1" 302
[14/May/2023:07:45:59 +0200] 64.227.166.35 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309
[14/May/2023:08:24:08 +0200] 161.35.214.179 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:09:11:38 +0200] 198.235.24.139 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[14/May/2023:09:33:02 +0200] 167.248.133.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[14/May/2023:09:33:03 +0200] 167.248.133.34 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:09:33:03 +0200] 167.248.133.34 TLSv1.2 AES256-SHA "PRI * HTTP/2.0" 379
[14/May/2023:09:45:48 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[14/May/2023:09:45:49 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383
[14/May/2023:09:45:57 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /infusions/downloads/downloads.php?cat_id=${system(ls)} HTTP/1.1" 341
[14/May/2023:09:45:58 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /login.php?secret=\"><script>alert(document.domain)</script> HTTP/1.1" 346
[14/May/2023:09:45:58 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 304
[14/May/2023:09:45:59 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310
[14/May/2023:09:45:59 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /idx_config/ HTTP/1.1" 310
[14/May/2023:09:46:00 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 311
[14/May/2023:09:46:00 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /info.php HTTP/1.1" 307
[14/May/2023:09:46:00 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /.json HTTP/1.1" 305
[14/May/2023:09:46:01 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /server-status HTTP/1.1" 308
[14/May/2023:09:46:01 +0200] 85.208.136.158 TLSv1.2 AES256-SHA "GET /config.json HTTP/1.1" 311
[14/May/2023:10:47:04 +0200] 192.133.77.15 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 387
[14/May/2023:10:47:06 +0200] 192.133.77.15 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[14/May/2023:11:04:39 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 309
[14/May/2023:11:04:40 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 307
[14/May/2023:11:04:41 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo HTTP/1.1" 307
[14/May/2023:11:04:42 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /test.php HTTP/1.1" 306
[14/May/2023:11:04:43 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /_profiler/phpinfo HTTP/1.1" 313
[14/May/2023:11:04:44 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /php.php HTTP/1.1" 305
[14/May/2023:11:04:44 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /php_info.php HTTP/1.1" 310
[14/May/2023:11:04:45 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phptest.php HTTP/1.1" 307
[14/May/2023:11:04:46 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dashboard/phpinfo.php HTTP/1.1" 315
[14/May/2023:11:04:47 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /infophp.php HTTP/1.1" 309
[14/May/2023:11:04:48 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /php-info.php HTTP/1.1" 310
[14/May/2023:11:04:49 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /testphp.php HTTP/1.1" 307
[14/May/2023:11:04:50 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info.php HTTP/1.1" 307
[14/May/2023:11:04:50 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /pinfo.php HTTP/1.1" 308
[14/May/2023:11:04:51 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /scripts/phpinfo.php HTTP/1.1" 313
[14/May/2023:11:04:52 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /inf.php HTTP/1.1" 307
[14/May/2023:11:04:53 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo.php HTTP/1.1" 309
[14/May/2023:11:04:54 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/phpinfo.php HTTP/1.1" 313
[14/May/2023:11:04:55 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin/info.php HTTP/1.1" 311
[14/May/2023:11:04:56 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /forum/info.php HTTP/1.1" 312
[14/May/2023:11:04:57 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /phpinfo/phpinfo.php HTTP/1.1" 310
[14/May/2023:11:04:57 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /token.php HTTP/1.1" 307
[14/May/2023:11:04:58 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info/phpinfo.php HTTP/1.1" 310
[14/May/2023:11:04:59 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info/info.php HTTP/1.1" 309
[14/May/2023:11:05:00 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /info/phpinfo HTTP/1.1" 308
[14/May/2023:11:05:01 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /php-info/phpinfo.php/php-info/phpinfo HTTP/1.1" 316
[14/May/2023:11:05:02 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /php-info/info.php HTTP/1.1" 311
[14/May/2023:11:05:03 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[14/May/2023:11:05:04 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[14/May/2023:11:05:04 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[14/May/2023:11:05:05 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.save HTTP/1.1" 307
[14/May/2023:11:05:06 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.old HTTP/1.1" 307
[14/May/2023:11:05:07 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.prod HTTP/1.1" 308
[14/May/2023:11:05:08 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.production HTTP/1.1" 312
[14/May/2023:11:05:09 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.development HTTP/1.1" 311
[14/May/2023:11:05:10 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /laravel/.env HTTP/1.1" 309
[14/May/2023:11:05:11 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /admin-app/.env HTTP/1.1" 311
[14/May/2023:11:05:11 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /api/.env HTTP/1.1" 307
[14/May/2023:11:05:12 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /app/.env HTTP/1.1" 307
[14/May/2023:11:05:13 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /development/.env HTTP/1.1" 311
[14/May/2023:11:05:14 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /apps/.env HTTP/1.1" 307
[14/May/2023:11:05:15 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cp/.env HTTP/1.1" 306
[14/May/2023:11:05:16 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /private/.env HTTP/1.1" 309
[14/May/2023:11:05:17 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /system/.env HTTP/1.1" 309
[14/May/2023:11:05:18 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /docker/.env HTTP/1.1" 308
[14/May/2023:11:05:18 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /cms/.env HTTP/1.1" 306
[14/May/2023:11:05:19 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /script/.env HTTP/1.1" 308
[14/May/2023:11:05:20 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /live_env HTTP/1.1" 307
[14/May/2023:11:05:21 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /application/.env HTTP/1.1" 312
[14/May/2023:11:05:22 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.project HTTP/1.1" 310
[14/May/2023:11:05:23 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env.dist HTTP/1.1" 307
[14/May/2023:11:05:24 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /back/.env HTTP/1.1" 308
[14/May/2023:11:05:24 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /core/.env HTTP/1.1" 307
[14/May/2023:11:05:25 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /docker/.env HTTP/1.1" 308
[14/May/2023:11:05:26 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /fedex/.env HTTP/1.1" 309
[14/May/2023:11:05:27 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /local/.env HTTP/1.1" 308
[14/May/2023:11:05:28 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /rest/.env HTTP/1.1" 307
[14/May/2023:11:05:29 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /._wp-config.php HTTP/1.1" 314
[14/May/2023:11:05:30 +0200] 54.184.14.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 301
[14/May/2023:11:19:40 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301
[14/May/2023:11:35:02 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[14/May/2023:11:43:47 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 331
[14/May/2023:11:53:52 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1" 390
[14/May/2023:12:08:50 +0200] 8.209.68.21 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /dns-query?dns=cR8BAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ HTTP/1.1" 340
[14/May/2023:12:11:56 +0200] 192.241.224.15 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328
[14/May/2023:12:22:16 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1" 327
[14/May/2023:13:02:10 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /_ignition/execute-solution HTTP/1.1" 319
[14/May/2023:13:21:11 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:13:30:00 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:13:42:25 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:14:09:31 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /actuator/gateway/routes HTTP/1.1" 315
[14/May/2023:14:28:02 +0200] 152.89.196.144 TLSv1.2 AES256-SHA "GET /geoserver HTTP/1.1" 305
[14/May/2023:15:07:24 +0200] 54.36.148.103 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 302
[14/May/2023:15:23:19 +0200] 162.243.141.12 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335
[14/May/2023:15:33:07 +0200] 94.102.61.90 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:15:45:46 +0200] 54.244.35.220 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[14/May/2023:15:46:06 +0200] 54.202.52.24 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 302
[14/May/2023:15:46:10 +0200] 54.202.52.24 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295
[14/May/2023:15:47:30 +0200] 107.170.241.17 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:17:17:24 +0200] 192.241.201.18 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314
[14/May/2023:17:20:49 +0200] 162.243.145.13 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348
[14/May/2023:17:21:41 +0200] 198.199.95.12 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310
[14/May/2023:19:05:36 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[14/May/2023:19:05:36 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[14/May/2023:19:05:37 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311
[14/May/2023:19:05:37 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311
[14/May/2023:19:05:38 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310
[14/May/2023:19:05:38 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310
[14/May/2023:19:05:38 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310
[14/May/2023:19:05:39 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310
[14/May/2023:19:05:39 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308
[14/May/2023:19:05:40 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308
[14/May/2023:20:10:22 +0200] 51.158.108.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 393
[14/May/2023:20:38:57 +0200] 172.104.11.4 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[14/May/2023:22:39:17 +0200] 193.235.141.90 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 307
[14/May/2023:22:49:16 +0200] 107.170.255.9 TLSv1.2 AES256-SHA "GET /actuator/health HTTP/1.1" 310
[14/May/2023:23:25:14 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[14/May/2023:23:27:07 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /nmaplowercheck1684099625 HTTP/1.1" 407
[14/May/2023:23:27:07 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" 388
[14/May/2023:23:27:07 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /evox/about HTTP/1.1" 393
[14/May/2023:23:27:07 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[14/May/2023:23:27:08 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /HNAP1 HTTP/1.1" 388
[14/May/2023:23:27:08 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" -
[14/May/2023:23:27:08 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /sdk HTTP/1.1" 386
[14/May/2023:23:27:09 +0200] 50.31.21.8 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383
[14/May/2023:23:46:59 +0200] 92.118.39.108 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310
[14/May/2023:23:53:21 +0200] 65.49.20.68 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[15/May/2023:00:02:41 +0200] 35.88.132.52 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[15/May/2023:00:03:23 +0200] 34.221.150.215 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 307
[15/May/2023:00:38:18 +0200] 60.217.75.70 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301
[15/May/2023:00:53:46 +0200] 74.235.104.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304
[15/May/2023:00:53:47 +0200] 74.235.104.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304
[15/May/2023:00:53:51 +0200] 74.235.104.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /conf/.env HTTP/1.1" 308
[15/May/2023:00:53:52 +0200] 74.235.104.101 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /conf/.env HTTP/1.1" 308
[15/May/2023:01:28:55 +0200] 93.159.230.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 302
[15/May/2023:01:56:09 +0200] 34.76.96.55 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301