[19/May/2023:02:57:07 +0200] 220.94.228.162 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:03:23:12 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 304 [19/May/2023:03:23:13 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.env HTTP/1.1" 304 [19/May/2023:03:23:13 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/credentials HTTP/1.1" 311 [19/May/2023:03:23:13 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/credentials HTTP/1.1" 311 [19/May/2023:03:23:14 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.aws/config HTTP/1.1" 310 [19/May/2023:03:23:14 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /.aws/config HTTP/1.1" 310 [19/May/2023:03:23:15 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /aws/credentials HTTP/1.1" 310 [19/May/2023:03:23:15 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /aws/credentials HTTP/1.1" 310 [19/May/2023:03:23:15 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /credentials HTTP/1.1" 308 [19/May/2023:03:23:16 +0200] 109.237.98.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /credentials HTTP/1.1" 308 [19/May/2023:03:30:22 +0200] 64.62.197.96 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:03:36:51 +0200] 64.62.197.101 TLSv1.2 AES256-SHA "GET /favicon.ico HTTP/1.1" 309 [19/May/2023:03:38:45 +0200] 64.62.197.95 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:03:40:01 +0200] 64.62.197.102 TLSv1.2 AES256-SHA "GET /geoserver/web/ HTTP/1.1" 309 [19/May/2023:03:40:10 +0200] 64.62.197.96 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [19/May/2023:03:55:36 +0200] 27.124.12.16 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /tt-976.html HTTP/1.1" 398 [19/May/2023:04:20:49 +0200] 206.189.113.131 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "HEAD / HTTP/1.1" - [19/May/2023:05:32:27 +0200] 198.199.95.12 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx HTTP/1.1" 314 [19/May/2023:05:36:00 +0200] 198.199.95.12 TLSv1.2 AES256-SHA "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 348 [19/May/2023:05:39:23 +0200] 107.170.192.15 TLSv1.2 AES256-SHA "GET /owa/auth/x.js HTTP/1.1" 310 [19/May/2023:07:23:41 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 379 [19/May/2023:07:23:45 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 383 [19/May/2023:07:23:46 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [19/May/2023:07:23:46 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET /server-status HTTP/1.1" 308 [19/May/2023:07:23:46 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET /config.json HTTP/1.1" 311 [19/May/2023:07:23:46 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET /.env HTTP/1.1" 304 [19/May/2023:07:23:46 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET /telescope/requests HTTP/1.1" 311 [19/May/2023:07:23:46 +0200] 35.216.190.48 TLSv1.2 AES256-SHA "GET /info.php HTTP/1.1" 307 [19/May/2023:08:04:19 +0200] 45.156.129.17 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:08:26:27 +0200] 178.79.182.185 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/May/2023:09:33:37 +0200] 138.197.20.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/May/2023:09:33:38 +0200] 138.197.20.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 754 [19/May/2023:09:33:39 +0200] 138.197.20.226 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 1150 [19/May/2023:09:43:45 +0200] 4.184.57.28 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/May/2023:11:12:08 +0200] 20.100.168.244 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [19/May/2023:14:23:52 +0200] 183.136.225.32 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [19/May/2023:14:37:11 +0200] 183.136.225.32 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 308 [19/May/2023:14:44:34 +0200] 138.246.253.24 TLSv1.2 AES256-SHA "GET /robots.txt HTTP/1.1" 403 [19/May/2023:15:26:59 +0200] 162.243.141.12 TLSv1.2 AES256-SHA "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 335 [19/May/2023:15:37:40 +0200] 198.235.24.13 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 377 [19/May/2023:15:46:00 +0200] 45.55.0.14 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:16:07:35 +0200] 35.92.7.102 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 306 [19/May/2023:16:11:15 +0200] 92.118.39.108 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.git/config HTTP/1.1" 310 [19/May/2023:16:22:17 +0200] 54.184.74.179 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [19/May/2023:16:23:07 +0200] 43.128.231.89 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:16:23:34 +0200] 43.128.231.89 - - "-" - [19/May/2023:16:24:32 +0200] 35.88.162.41 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 295 [19/May/2023:16:50:02 +0200] 192.155.90.220 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:16:56:12 +0200] 23.251.102.74 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:16:56:19 +0200] 23.251.102.74 TLSv1.2 AES256-SHA "GET /showLogin.cc HTTP/1.1" 311 [19/May/2023:19:51:05 +0200] 128.14.134.170 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:20:04:43 +0200] 198.199.112.86 TLSv1.2 AES256-SHA "GET /autodiscover/autodiscover.json?@zdi/Powershell HTTP/1.1" 328 [19/May/2023:20:06:18 +0200] 194.55.224.203 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /ztp/cgi-bin/handler HTTP/1.1" 315 [19/May/2023:20:15:47 +0200] 35.181.63.148 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 316 [19/May/2023:21:02:43 +0200] 162.216.149.61 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [19/May/2023:21:21:40 +0200] 194.87.151.136 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /.env HTTP/1.1" 310 [19/May/2023:21:21:40 +0200] 194.87.151.136 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" 307 [19/May/2023:22:08:20 +0200] 209.38.192.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET /remote/login HTTP/1.1" 395 [19/May/2023:22:08:21 +0200] 209.38.192.133 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "POST /remote/logincheck HTTP/1.1" 400 [19/May/2023:22:21:40 +0200] 35.93.38.199 TLSv1.2 AES256-SHA "GET /.svn/wc.db HTTP/1.1" 308 [19/May/2023:22:29:04 +0200] 183.136.225.44 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385 [19/May/2023:22:30:35 +0200] 183.136.225.44 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [19/May/2023:23:08:49 +0200] 35.93.38.199 TLSv1.2 AES256-SHA "GET /.aws/credentials HTTP/1.1" 311 [19/May/2023:23:12:21 +0200] 198.235.24.192 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 383 [20/May/2023:00:03:17 +0200] 35.93.38.199 TLSv1.2 AES256-SHA "GET /.git/config HTTP/1.1" 310 [20/May/2023:01:16:58 +0200] 103.149.192.171 TLSv1.2 AES256-SHA "GET / HTTP/1.1" 301 [20/May/2023:01:36:08 +0200] 35.187.98.121 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 301 [20/May/2023:01:55:46 +0200] 205.210.31.139 TLSv1.2 DHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 385